Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/3a1ad506-6ee7-3e19-9834-505baf7c0f5e.roa
File:                     3a1ad506-6ee7-3e19-9834-505baf7c0f5e.roa (raw, json)
Hash identifier:          VQXoQGLrROF+8f5qNeK/x4HSGRnMlDN0W47B7eT2+h4=
Subject key identifier:   B3:84:1D:39:CB:85:C5:7D:51:E0:95:3B:7B:D6:55:7C:6B:63:FC:25
Certificate issuer:       /CN=8b3000e8-1e0f-482a-991d-e2358c249593
Certificate serial:       010D0C9F4328584A9E9666247E14CACEC994A800
Authority key identifier: 78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/3a1ad506-6ee7-3e19-9834-505baf7c0f5e.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     10753
IP address blocks:        192.67.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:66:24:7e:14:ca:ce:c9:94:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3000e8-1e0f-482a-991d-e2358c249593
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=ddaf86e8-9c4e-4b09-b527-2a09e2e2eadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:ad:91:24:06:b8:1b:74:94:f6:ee:f5:02:
                    78:5a:ff:13:6a:62:a9:a2:94:52:66:a0:49:3e:10:
                    ae:30:d1:01:ce:af:de:50:3c:06:bf:4a:3f:b8:cc:
                    ac:f7:65:2e:92:86:b6:98:88:b7:d8:75:69:1c:34:
                    ef:e1:fa:f7:a4:a6:9c:cd:52:a9:a2:de:85:92:6f:
                    c9:08:f6:c4:8c:af:c7:ab:84:27:29:3f:5b:c6:b5:
                    5f:ff:b7:5b:b3:51:d0:e7:f8:43:b6:d3:c1:9d:60:
                    ee:70:0a:21:3f:54:85:e3:50:b9:40:33:8b:70:f3:
                    f5:4c:17:7c:9a:91:3b:a0:46:f4:16:d6:7d:cc:fa:
                    67:0a:cd:99:51:61:ea:d7:ee:98:bf:59:9e:0c:20:
                    aa:f9:55:23:b8:80:53:8c:8b:e0:ba:fa:87:27:b7:
                    45:b6:04:7f:f2:11:a6:be:e9:b6:f1:e5:a6:37:81:
                    4a:bf:2b:bd:ac:38:b8:f9:8b:ef:36:03:2f:6a:f3:
                    48:19:02:c5:7c:53:53:94:fc:2b:20:59:c4:48:9d:
                    30:34:2f:a3:b7:fe:67:26:01:c2:b8:39:5d:60:0f:
                    87:32:bc:ea:0d:b2:ae:d2:89:57:fc:d1:b0:0d:bc:
                    a8:c1:af:30:e9:27:fe:7f:4c:5b:b1:e2:8e:6c:2a:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:84:1D:39:CB:85:C5:7D:51:E0:95:3B:7B:D6:55:7C:6B:63:FC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/3a1ad506-6ee7-3e19-9834-505baf7c0f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl

            X509v3 Authority Key Identifier:
                keyid:78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:08:25:20:be:b5:53:1a:f8:9a:57:af:a3:71:d8:7a:12:
         4f:c0:c3:e8:f5:71:7a:78:a2:d8:4c:f7:90:62:d9:ec:81:97:
         71:c4:0d:c4:5b:dd:3d:c8:9f:33:d9:29:f6:1e:e2:02:99:c3:
         74:ec:3c:08:c7:8e:9e:fe:9d:2d:a9:43:f4:c4:7d:35:4e:e5:
         c4:07:46:88:85:1a:f2:86:c8:f0:a7:c0:da:37:d6:e9:9d:25:
         f2:2d:79:0b:74:cf:d0:ab:66:ba:1d:d5:3d:e2:7f:87:f8:e6:
         40:c0:f7:43:23:2b:53:27:29:65:46:da:c4:bc:9b:45:a0:f2:
         72:f5:70:c7:e3:bf:c9:e0:d1:87:b9:84:12:c8:1f:85:12:18:
         ab:b2:12:46:b9:f9:bd:05:11:2e:68:cc:87:3c:bb:67:5e:25:
         98:20:5f:28:4c:6c:33:3c:2b:af:61:c3:db:52:26:6c:e5:60:
         79:d8:0d:05:72:00:ba:9c:b0:f0:53:46:31:ed:63:f7:68:97:
         c5:74:df:52:fc:7c:ac:7b:0e:ce:69:e9:9d:5d:79:90:e4:1b:
         94:19:ff:20:41:77:da:4a:db:1d:85:b7:a5:66:ba:02:d0:21:
         e4:1e:67:fd:d8:3f:0f:8f:e7:5e:5a:eb:80:7c:b6:c8:ba:66:
         30:3d:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:29 2025 by rpki-client