Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa
File:                     9b38aa73-d1e5-3574-86f0-2be61de03925.roa (raw, json)
Hash identifier:          VQgg7mFJhZ8Vrb+Q0QHOzQ0ccHkaIUKBqCpgu1/yvwg=
Subject key identifier:   9F:AF:CD:56:AE:0F:DF:AA:2A:CE:44:C1:2B:63:82:3C:65:50:23:E8
Certificate issuer:       /CN=e0016267-dc0a-4a90-a925-951bf1a98788
Certificate serial:       010D0C9F4328584AA6F629EA3489647A36B9C620
Authority key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     18907
IP address blocks:        104.219.144.0/22 maxlen: 22
                          162.249.36.0/22 maxlen: 22
                          2605:2880::/48 maxlen: 48
                          2605:2880:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:29:ea:34:89:64:7a:36:b9:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e95027f3-e5b0-4a8a-9af7-b3fc69e569f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:3c:ea:07:a5:a4:26:cc:a3:d8:55:dd:b7:
                    3c:a9:2e:a4:39:0b:a1:ee:13:79:74:fe:2b:f9:93:
                    9e:62:da:aa:2e:de:02:97:46:06:3b:1a:49:ed:63:
                    df:87:d3:0c:a4:79:b4:7d:e0:7d:d6:bc:f3:ac:dd:
                    7d:99:76:fa:75:2f:b0:eb:a8:38:6c:10:e8:32:8e:
                    4f:00:39:37:5d:1a:94:f9:d1:85:5f:b1:49:c1:76:
                    c1:f6:27:5e:25:be:6c:15:c4:b3:f7:ef:22:69:11:
                    94:b6:38:ff:6b:39:da:f6:5a:1b:98:5d:1d:1a:01:
                    9b:df:99:93:a0:c2:c7:79:61:43:f1:53:ad:fe:67:
                    19:1d:25:ee:98:6f:fd:15:ec:84:c8:2f:3d:23:f1:
                    6f:91:62:3e:76:db:f7:b9:a2:0e:69:40:a2:9c:50:
                    e5:66:a3:8e:1e:c2:8a:39:4d:f0:4f:92:af:c0:38:
                    d5:b4:e4:1f:73:ad:44:72:8a:8a:71:85:33:fa:d1:
                    a5:d0:d5:70:e5:cc:f4:ba:d0:8e:99:34:90:bb:e5:
                    25:4f:0b:46:a9:9a:8b:ba:f2:f3:f5:54:63:f2:fb:
                    cd:14:19:93:4a:69:84:c9:8a:10:99:70:96:ec:88:
                    cc:1d:67:60:26:2f:d7:dc:81:9d:10:00:dd:82:88:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AF:CD:56:AE:0F:DF:AA:2A:CE:44:C1:2B:63:82:3C:65:50:23:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl

            X509v3 Authority Key Identifier:
                keyid:66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.144.0/22
                  162.249.36.0/22
                IPv6:
                  2605:2880::/48
                  2605:2880:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:98:73:f5:6b:3e:97:22:6d:fd:26:25:ea:71:43:7d:e5:0c:
         bb:72:95:00:67:f4:3f:10:85:a1:a2:f3:5a:35:e2:5f:db:e8:
         57:e9:8f:98:61:02:06:28:9d:e4:50:14:39:cd:b5:6c:83:fc:
         c2:5e:98:9a:a6:dd:48:a4:95:7c:6e:6a:9c:77:82:77:58:05:
         dd:1a:fa:27:3f:74:ad:3e:10:84:c5:02:4a:d9:a7:44:87:5c:
         1e:00:ab:9f:9c:9c:24:93:6c:41:63:b3:31:82:33:9d:e3:4e:
         21:99:9c:2e:cf:63:17:ef:b9:ad:16:1d:9a:5e:e7:fd:c3:f4:
         6f:79:17:8b:53:ee:a4:11:02:45:32:35:b0:97:17:6c:34:2e:
         68:fa:3b:d9:d0:4c:34:41:7f:f5:7b:86:56:a9:4f:a7:1b:ce:
         aa:b7:06:35:7b:44:f2:32:8b:3b:2d:fd:ae:7d:7e:09:0d:e9:
         76:fb:e4:d8:c8:f6:2a:cf:41:75:27:2f:6f:3a:ad:19:63:2d:
         3e:a5:73:be:e5:4f:49:89:3a:42:6e:53:a5:7c:b3:2b:a0:6b:
         e6:f2:a6:67:a5:d0:87:9d:7a:28:ee:4a:c4:75:f3:d4:db:33:
         23:52:bb:bf:2f:66:02:dc:e8:b1:74:a4:88:f3:7e:09:ab:f5:
         5a:5b:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:37 2025 by rpki-client