Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/00681fed-7421-32cb-94ff-8ca143932bd9.roa
File:                     00681fed-7421-32cb-94ff-8ca143932bd9.roa (raw, json)
Hash identifier:          JVzfwWdSgLQwd0fFuDdpPCTimQvgoEUm0cnaB0gAp4g=
Subject key identifier:   7F:CF:37:C5:49:9F:89:09:9A:32:2F:70:A8:D1:99:EA:12:CE:70:91
Certificate issuer:       /CN=c75c2a49-d4ec-49ef-affc-f07717c14231
Certificate serial:       010D0C9F4328584AB65101631F2CF7AA2A0E1680
Authority key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/00681fed-7421-32cb-94ff-8ca143932bd9.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     13347
IP address blocks:        170.205.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:01:63:1f:2c:f7:aa:2a:0e:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75c2a49-d4ec-49ef-affc-f07717c14231
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=3c07e53a-8fc8-47a7-aff6-87276e995305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:e1:1d:d5:21:48:d9:a4:ce:ad:7d:d8:6d:
                    ff:67:11:7d:87:e3:70:0d:e8:4f:01:a5:32:eb:f0:
                    c6:c2:6a:47:97:d6:d0:2a:f0:d9:01:00:d5:71:2c:
                    f8:58:0d:bd:7c:bb:b7:5a:b2:b4:ce:ca:10:02:36:
                    dc:ad:2d:97:19:ff:ab:5c:65:49:4e:59:88:57:b3:
                    df:f6:a6:cc:6b:bf:1f:0c:ad:28:57:76:ed:8d:3f:
                    3f:36:30:2f:ce:f7:0e:44:f4:04:a6:5b:90:ea:f6:
                    79:ff:09:ac:0e:ba:46:a8:64:a7:33:e1:87:be:35:
                    ea:bb:3e:7f:ca:55:f0:95:dd:5e:ef:cd:b7:e6:43:
                    58:0d:6f:06:d5:c9:0c:06:cb:e7:df:71:2d:bb:35:
                    97:e3:a9:44:0e:da:4d:fc:56:56:15:ff:75:23:e9:
                    62:7a:aa:79:74:d9:df:54:2b:25:37:29:98:af:ab:
                    3d:73:2c:ac:fd:84:95:16:47:00:79:81:78:23:46:
                    eb:7b:12:51:0e:7a:af:c3:2f:88:b6:82:d9:53:22:
                    b8:3d:a2:a5:c6:39:c2:36:0c:c7:34:9e:74:68:64:
                    b2:18:9b:71:70:42:d0:4a:8f:d5:76:26:33:4a:37:
                    5f:6a:e9:34:99:a6:99:35:b0:2b:52:ff:82:f5:b8:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:37:C5:49:9F:89:09:9A:32:2F:70:A8:D1:99:EA:12:CE:70:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/00681fed-7421-32cb-94ff-8ca143932bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl

            X509v3 Authority Key Identifier:
                keyid:1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:43:55:5f:66:cf:6f:b1:3c:05:ca:bd:6a:8b:f3:5f:1f:c7:
         fa:cb:c2:68:7c:27:60:21:80:12:99:f1:df:b7:57:42:11:40:
         1b:81:0f:9b:d8:c6:18:ac:d2:6d:87:75:8c:3a:17:2f:64:5a:
         2a:fe:7e:8a:9c:a9:31:d2:45:52:12:d7:1b:87:28:78:01:a2:
         2e:db:f5:3f:b5:51:20:85:5e:30:f9:58:bc:a7:e2:b5:1e:04:
         84:7b:d5:7f:bd:2a:fe:ed:0a:6e:02:30:a4:1a:1d:58:00:79:
         ee:80:4d:f3:c6:b7:e3:6a:59:f2:63:55:bf:5b:8a:28:63:b0:
         d4:5d:34:1c:d0:fb:1d:1c:fa:14:54:a9:90:3a:3b:cb:da:22:
         ee:e6:6c:7e:3c:a5:08:3c:1e:bf:21:d8:44:f7:6a:7e:ee:2f:
         44:28:f3:1a:23:0a:8b:1c:90:83:a2:7c:95:d0:77:21:e3:83:
         5d:ac:b5:7a:0d:d0:3a:33:2d:9a:a1:c5:85:d0:42:6d:7a:7a:
         c6:3a:6b:0b:3c:3e:11:25:6d:76:a2:32:87:1f:38:24:47:bf:
         8b:e3:db:73:ef:98:ca:24:9a:12:d5:41:6c:bb:be:2f:be:99:
         04:2a:49:7e:68:68:ed:7e:83:b0:89:c0:49:e5:e8:c1:63:db:
         a5:96:5b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:37:42 2025 by rpki-client