Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a90ebdd1-64ca-3c0e-8fdb-952600b03e5e.roa
File:                     a90ebdd1-64ca-3c0e-8fdb-952600b03e5e.roa (raw, json)
Hash identifier:          hnsIeLBra6KPsBPm+lkpBoZp90s/g1MNuljNc1OE17g=
Subject key identifier:   B4:EB:E3:B6:8E:60:AB:DE:39:31:47:04:27:AE:AD:4A:40:89:08:E8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1618B4748599BC565034180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a90ebdd1-64ca-3c0e-8fdb-952600b03e5e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        65.27.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:8b:47:48:59:9b:c5:65:03:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c023631a-13e6-4dad-be38-c9d32850dd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:dc:0a:c4:b3:9a:34:b1:93:67:cd:4c:b9:
                    57:88:5e:72:d0:01:d1:fa:8d:cd:4f:22:03:63:f3:
                    b5:cb:48:b6:2e:94:2a:49:ee:d8:a9:63:31:18:10:
                    e1:4d:72:1f:1a:02:0c:5d:42:37:20:2d:ae:03:c3:
                    27:29:2f:bc:0f:61:c8:c5:12:68:de:62:ab:fb:aa:
                    b8:54:ed:5f:6b:ad:85:af:9e:06:15:28:06:72:7b:
                    c1:18:ec:19:5a:e0:fb:a6:19:44:6d:5e:39:f2:e3:
                    75:21:d0:5e:8b:45:ca:57:18:b2:47:b4:9c:fc:8e:
                    0a:eb:e4:fc:d0:03:b2:4a:56:fb:20:da:dd:54:3c:
                    38:b0:07:8a:da:95:cc:ae:f0:75:48:f4:fb:63:d6:
                    55:ac:c1:f7:90:75:28:8e:3e:c5:24:95:36:f8:84:
                    67:1a:f0:26:96:a8:02:1b:1b:57:98:3e:fc:81:05:
                    9b:b4:02:1c:fd:19:c8:43:de:47:dd:11:c1:8b:8e:
                    bb:a5:d5:b3:41:67:95:da:c2:20:4f:3d:04:70:e1:
                    8a:3f:97:1f:95:0d:a3:d8:b1:4a:40:fb:5d:92:d8:
                    1c:1d:e0:51:15:1d:79:e5:c5:55:00:8c:cb:4c:b4:
                    1f:e0:4d:04:dd:4b:47:f6:8f:d3:b8:4a:66:f2:f9:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:E3:B6:8E:60:AB:DE:39:31:47:04:27:AE:AD:4A:40:89:08:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a90ebdd1-64ca-3c0e-8fdb-952600b03e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.27.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:5e:4a:8e:f0:f3:70:7a:24:2b:46:9a:75:c5:3c:cb:79:
         d4:1a:51:fa:3a:ba:06:3b:74:c7:3d:e0:99:7a:61:dd:80:39:
         09:98:9e:f6:65:f4:20:65:9e:7a:b4:b6:0b:40:83:56:8b:4b:
         e1:5a:af:9d:64:8d:26:ab:b7:25:f5:35:2f:28:e2:31:9f:7e:
         13:bf:fd:a2:c4:00:84:44:30:e1:af:19:82:a5:02:48:ad:59:
         f9:80:3e:6a:99:30:9b:e7:fe:a2:84:26:fe:0b:7f:d8:17:a2:
         92:5a:6b:76:d8:51:0c:0f:c1:1e:35:08:ca:ac:c0:56:f6:a7:
         b8:fc:3a:6c:07:9a:43:e9:cc:71:c7:80:f8:7e:0b:90:03:7a:
         e1:17:bc:f2:4b:c3:a5:09:11:b3:18:70:10:4a:65:f2:0b:08:
         7a:4d:d8:f3:96:43:44:85:94:cf:61:85:f9:47:37:1e:74:7a:
         5c:f8:5f:af:7d:5f:bb:57:62:79:a8:2e:56:76:e9:65:ea:64:
         fa:37:ec:60:a9:88:d5:e3:95:55:67:26:8d:0d:0f:9f:6f:aa:
         22:83:77:1f:b2:f2:c7:1d:c1:4e:aa:0f:ea:95:7c:ba:9b:4d:
         bf:fa:dc:a8:7a:4f:fa:07:17:03:04:5e:37:09:c6:65:25:e4:
         43:cb:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:38:29 2025 by rpki-client