Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa
File:                     44f98da8-316e-3e2e-a620-17a85c3d1158.roa (raw, json)
Hash identifier:          o2vrTsTNI5yijZiXkJzqCGI+BRazkWROx/b+9o48wXE=
Subject key identifier:   EC:6E:8C:4A:A5:F2:58:B1:6D:CE:7A:F7:06:15:BC:4E:36:D4:59:82
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584A89A622572990E1491FE19900
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     912
IP address blocks:        208.93.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:22:57:29:90:e1:49:1f:e1:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=af97fc55-ddac-4554-85b1-51d49f848661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:24:9b:f6:12:78:b8:8b:2c:cb:59:5d:33:
                    05:4c:d9:a9:35:bf:dc:28:28:eb:13:9c:7f:ef:b4:
                    0e:83:bd:2d:b8:4c:f5:ea:8c:6b:eb:9c:19:3c:6e:
                    d5:55:98:28:9e:31:e1:59:85:53:f5:47:34:a5:9b:
                    11:5d:28:81:f1:1d:bf:dd:13:ab:1f:d9:cd:13:ce:
                    fd:e3:d8:18:2e:5e:c0:c0:40:cf:e5:da:67:c0:3c:
                    72:7d:f1:18:b8:3f:3e:45:39:9a:af:8e:d2:b7:24:
                    cd:49:a5:a3:17:8f:13:af:26:ff:42:0d:1e:a5:35:
                    46:e1:b2:46:38:9c:73:e6:0b:05:0f:84:a6:d7:0a:
                    be:fe:b9:9a:ad:bc:14:59:ec:f5:d3:9e:f1:16:80:
                    27:ec:84:29:bb:4d:5d:05:74:88:f3:82:71:1d:a2:
                    90:76:3c:7d:c9:f9:bc:8b:1d:9a:b1:5f:12:b7:8a:
                    68:c1:9c:1c:a7:d4:d8:2b:4b:51:4d:2f:67:d2:b1:
                    c1:a9:42:eb:01:21:cc:5e:21:97:da:30:a3:29:ff:
                    4b:3c:6b:40:ef:7a:0d:c4:da:e5:fc:90:8b:e6:27:
                    1c:7e:ac:53:1f:c6:7c:7e:98:14:d2:c6:a7:dc:ea:
                    f7:c8:ff:1e:ab:e8:30:30:08:7b:95:16:34:81:9a:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6E:8C:4A:A5:F2:58:B1:6D:CE:7A:F7:06:15:BC:4E:36:D4:59:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a7:a4:41:d0:2f:cc:d8:34:9a:ae:d5:23:00:81:d9:2e:8c:
         a4:a0:60:cd:72:74:60:59:8a:b7:73:de:92:40:f3:ba:ce:d9:
         a0:9d:b0:95:88:05:00:c4:0c:75:9e:bd:0a:ea:d1:55:ef:37:
         8d:5b:bd:73:d9:19:1f:c5:1e:99:e7:a6:85:1c:f0:c9:4a:7d:
         7b:c7:f9:4e:66:20:4a:f8:41:a7:63:33:e7:db:88:c3:5c:24:
         c2:90:84:81:1a:5b:57:3c:a2:14:9d:4b:de:df:1a:b9:08:3e:
         a2:fb:90:3e:c9:75:f4:52:9d:1a:cb:06:4d:4e:8f:af:1f:26:
         0f:4d:2d:19:03:aa:7b:2a:29:13:03:a6:1c:b5:ec:19:d3:e4:
         3c:05:f5:ce:43:00:d8:06:73:02:4b:a9:1e:18:9d:30:61:a1:
         9d:7e:8c:84:ec:34:b5:ab:db:c4:4c:47:4e:78:e9:7a:b0:71:
         41:d6:7e:66:74:fd:06:62:da:38:01:68:62:48:51:77:88:91:
         33:47:af:f2:d9:b7:6b:68:ea:aa:1d:05:8b:ef:c1:90:ff:38:
         31:a7:8c:70:3b:3a:81:2e:a4:23:69:94:4b:36:bc:3e:00:30:
         01:d0:b1:08:99:8c:0b:81:e9:39:5a:5f:0b:b2:ab:8a:7c:36:
         7f:ab:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:18 2025 by rpki-client