Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
File:                     46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa (raw, json)
Hash identifier:          u+rYWPNXemQjOdHjhKKFO189bt1C2a0vQAceEf6yl5U=
Subject key identifier:   D5:1A:D3:1B:6D:C7:4D:4C:D2:15:68:E8:DE:A9:F2:70:6D:6A:16:2F
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A331AF54885F5B917FC160580
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     11290
IP address blocks:        172.97.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f5:48:85:f5:b9:17:fc:16:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=cf91fd6e-13ed-44c3-ba92-47ed87043c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:ef:3f:d5:2d:e7:5b:5f:95:af:95:ef:b9:
                    c6:7b:f8:ce:5e:2d:6a:2d:cf:2b:78:c7:ef:cd:61:
                    02:ea:0e:e5:b1:9a:83:fc:bd:e3:f6:f7:8a:f9:2a:
                    da:7a:59:d4:f9:28:e4:81:e2:dc:77:4a:82:66:86:
                    b1:8e:32:dc:39:26:c6:e2:7a:4b:79:9b:23:64:84:
                    75:cf:5c:61:e3:02:09:bb:f9:ab:72:75:1c:a3:30:
                    fb:9b:64:ac:63:38:9f:1b:57:13:f6:12:3b:00:b9:
                    b8:41:8a:40:29:ed:9c:e3:cd:3b:3a:8c:f5:50:5a:
                    43:dd:ef:73:39:e8:c5:fc:05:bc:aa:a3:b6:47:9a:
                    bc:12:61:3b:5e:55:09:a1:35:81:1f:d2:d8:b7:40:
                    e1:20:0a:2f:51:e5:c0:07:1a:4e:b1:08:03:55:5a:
                    5d:dd:d0:3c:f3:f8:c9:d6:1d:9e:08:9c:bc:ca:0a:
                    85:7b:e6:a2:95:a0:f9:89:7b:1a:95:dd:dc:18:1c:
                    09:2a:88:d0:31:8b:2a:1c:58:9a:07:3c:5c:5c:4a:
                    b1:68:c2:48:1c:b3:41:c1:77:6c:a0:7c:d0:41:1a:
                    17:4a:f3:bc:2f:e7:89:f1:96:49:f6:dd:8b:7a:2c:
                    d2:fa:64:50:01:95:c0:3d:b2:7e:1a:b3:12:7f:9a:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1A:D3:1B:6D:C7:4D:4C:D2:15:68:E8:DE:A9:F2:70:6D:6A:16:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.97.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:33:bc:0a:74:c0:4a:94:70:42:72:d5:27:c6:08:ed:43:
         38:76:00:61:63:71:d8:47:da:3a:0d:e9:f2:48:b0:20:90:9d:
         dc:44:94:6f:1d:44:c3:8f:96:a8:12:ed:90:5d:d3:8f:09:42:
         a2:52:ed:a7:61:6d:13:8d:b3:6c:f0:63:ef:00:92:8a:37:32:
         39:c1:fa:82:1e:cd:76:74:7f:14:45:81:39:ad:91:7e:f2:3f:
         98:b7:68:1c:5c:1f:8d:9c:17:06:b3:a9:37:da:9a:b5:4b:f2:
         5b:1a:88:fb:25:94:4a:49:9a:36:78:2a:99:4c:5d:c9:54:dd:
         fc:f2:22:df:99:7a:c4:6c:f5:6a:d5:71:bc:51:97:46:6b:47:
         b2:ad:8d:6d:a1:89:a5:58:df:b7:a6:ef:cf:d7:c3:6f:42:35:
         27:66:1b:94:de:b2:3d:49:01:ff:79:ac:78:29:91:90:ca:0c:
         4f:ee:a1:37:db:4b:71:61:02:f4:f3:80:e7:0e:31:7e:8b:8d:
         88:e8:13:58:d7:cf:01:a3:36:b2:62:03:13:81:48:46:ba:e4:
         89:94:3f:e7:2f:0a:e8:a4:52:04:b7:c9:50:f4:11:cc:3d:bf:
         42:88:2a:90:79:05:fb:e2:cd:e3:fd:82:6f:b5:0e:91:06:42:
         26:9e:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:20 2025 by rpki-client