Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa
File:                     22bea922-373a-3050-a929-ae142e552b24.roa (raw, json)
Hash identifier:          kI5AQUkbICaDeYN1vFo7XvTaMvLHWF67gIKTVvQYDmU=
Subject key identifier:   18:A4:86:C8:C4:B7:3E:13:7F:53:4A:8F:4A:58:7B:FB:19:0F:A7:B0
Certificate issuer:       /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
Certificate serial:       010D0C9F4328584BB88D185641F6985E6BEBE000
Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        165.140.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:18:56:41:f6:98:5e:6b:eb:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=082422b2-42cc-47cd-bc42-36705c8cc13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:46:80:1f:f6:46:ee:ae:3a:5a:3a:f7:c3:
                    ac:1d:8a:b4:e1:a2:ea:4b:f7:3c:80:c9:b3:f8:1e:
                    a6:3d:a4:5e:8e:f3:10:bc:47:59:d0:50:82:1d:e5:
                    12:49:d3:ce:31:bf:86:0d:bc:1a:ed:c3:c0:fa:61:
                    5b:d1:05:7b:da:50:48:2e:21:71:ca:be:94:46:56:
                    5b:e1:1f:f2:f6:8c:37:2e:4f:2b:5d:22:2f:97:0f:
                    4b:93:18:8f:ba:d0:9e:94:36:e1:f7:43:8f:3f:4e:
                    56:4b:3d:67:cb:56:cb:8b:79:e4:b1:88:35:19:2e:
                    12:b4:ac:94:fc:55:f5:f7:7f:c7:c4:f6:99:ff:1a:
                    0e:a2:f4:53:f2:97:90:6f:a5:80:6c:27:85:29:21:
                    52:78:64:40:7f:63:6e:31:40:f9:ce:5e:94:63:e6:
                    24:f9:35:fe:91:a2:69:42:23:30:58:b4:d1:59:ee:
                    58:c1:b0:aa:a1:df:95:6c:6b:19:62:78:75:bd:1e:
                    d4:44:38:d6:ae:c5:81:b4:05:cd:83:a2:0f:6e:99:
                    8d:bd:f3:22:be:72:91:44:ea:d8:42:bf:a9:7e:fd:
                    c4:22:b6:44:81:70:34:d0:4f:6b:89:12:01:a9:2a:
                    d4:d4:58:1b:0b:a8:ff:ab:41:89:73:c7:97:42:9a:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A4:86:C8:C4:B7:3E:13:7F:53:4A:8F:4A:58:7B:FB:19:0F:A7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl

            X509v3 Authority Key Identifier:
                keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:dd:fb:05:6a:c3:4d:55:1a:6b:d0:2d:b7:7c:83:76:02:
         4c:05:a0:d1:03:8b:0d:4e:a3:a6:a5:49:82:6d:cf:2c:2e:3b:
         4f:1b:2a:34:7d:7d:ef:d2:a7:03:a6:23:74:9b:bc:8e:59:8e:
         e8:c4:11:02:bd:c9:65:63:f7:83:e2:35:7b:b5:9f:2e:4d:8e:
         ea:b8:db:1d:33:b9:06:cb:bf:39:86:83:84:36:7d:5f:fd:21:
         d6:6b:05:97:71:8a:bd:13:70:49:c5:25:50:6c:7a:28:c4:1e:
         61:0b:3e:83:a1:34:c6:60:d0:c5:ad:d2:07:9b:05:26:79:cf:
         19:7b:40:49:5f:c9:85:bd:d7:8d:18:0c:ff:e8:a6:3e:12:1d:
         e9:53:ba:11:0d:75:33:8e:22:9c:d8:b4:d8:2f:5d:2d:a6:9e:
         58:34:82:20:b5:24:d7:d2:4c:2d:27:30:32:c3:12:b6:1d:0c:
         b4:f2:5f:e9:f7:df:68:65:c7:09:fd:be:eb:59:07:3e:a4:4f:
         45:0f:bd:d3:da:e4:9c:ad:1b:2e:d7:f4:d3:56:c9:2a:e8:eb:
         0b:79:90:80:2f:3c:be:f5:91:eb:2a:8a:c5:50:a9:15:2c:2e:
         a4:68:2d:5b:94:43:08:54:54:ed:65:45:15:3b:b2:6e:20:45:
         66:a6:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:24 2025 by rpki-client