Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/44e22938-b46f-36b4-bcab-9758a3800112.roa
File:                     44e22938-b46f-36b4-bcab-9758a3800112.roa (raw, json)
Hash identifier:          wmdArYE68RMz16ZJFeR+5KiMBeNKf0z+tzSZhT3bb2U=
Subject key identifier:   89:4D:0E:ED:2F:2F:A9:2D:C9:C5:3C:23:B3:62:38:00:34:68:A0:ED
Certificate issuer:       /CN=e987b11b-b307-4d95-abbc-a061ff00c004
Certificate serial:       010D0C9F4328584A9900CE6071B3AC1A8995C200
Authority key identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/44e22938-b46f-36b4-bcab-9758a3800112.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     11475
IP address blocks:        134.199.40.0/22 maxlen: 24
                          162.219.180.0/22 maxlen: 24
                          208.82.232.0/22 maxlen: 24
                          2602:ffe1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:ce:60:71:b3:ac:1a:89:95:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e987b11b-b307-4d95-abbc-a061ff00c004
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=4551cc50-4113-4354-93c9-41c8e7140aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:ec:66:6f:5d:36:71:cf:37:78:dc:8f:0d:
                    2c:49:5a:f6:3e:be:48:d8:10:bf:3e:28:f6:ed:e2:
                    84:07:fd:88:c1:b8:0d:f0:5d:e3:1b:c7:99:96:39:
                    32:c3:6f:0e:0d:3b:5a:9b:c7:f4:e6:d9:cc:5d:c9:
                    09:3c:49:6c:e9:3d:ea:22:77:87:03:ea:70:53:e3:
                    3a:fa:db:af:b2:3b:db:9d:c8:45:22:f2:fa:06:fb:
                    ef:ce:2c:cf:a1:2f:c6:e5:bf:ee:64:a1:10:61:5e:
                    a6:0b:50:9b:2a:4f:de:38:5d:2c:8d:d4:14:b0:2e:
                    56:0a:07:67:fb:82:8b:d5:97:96:7a:4a:9e:e5:f4:
                    62:5e:5f:fa:68:a4:46:e3:da:26:af:77:10:79:fc:
                    8e:46:8a:7d:6a:4a:89:84:2e:f9:2b:b7:41:87:63:
                    05:d1:15:43:4d:bb:1a:4c:9c:99:cf:c9:60:80:34:
                    23:88:b6:bb:3c:1d:23:81:f7:10:30:e8:84:3e:ba:
                    bf:76:7a:73:16:78:d7:09:f2:e0:f5:cb:4f:2d:33:
                    15:d4:27:30:b4:55:1a:56:c9:bd:f3:fa:c9:13:0b:
                    3a:45:17:e3:56:44:ac:89:f2:13:c4:98:e7:63:64:
                    70:23:79:11:c1:d4:4f:c4:c9:6f:6c:d5:3b:53:d6:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:0E:ED:2F:2F:A9:2D:C9:C5:3C:23:B3:62:38:00:34:68:A0:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/44e22938-b46f-36b4-bcab-9758a3800112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.40.0/22
                  162.219.180.0/22
                  208.82.232.0/22
                IPv6:
                  2602:ffe1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:d4:36:21:da:f0:8e:35:47:3b:d9:c1:8a:55:40:5a:b5:
         97:17:5c:2f:28:e7:70:19:22:6d:9a:85:15:52:44:b3:2b:d7:
         28:8e:4f:69:84:6e:7a:d4:45:34:ea:c1:e6:81:cb:12:0f:91:
         de:65:5b:e8:09:7f:5e:58:87:3b:b9:63:ba:c6:6b:2e:69:71:
         31:e9:51:f7:83:c4:3e:af:9c:4d:01:7b:1b:52:46:48:14:43:
         99:23:0b:e1:31:a6:8b:57:b5:d4:e1:80:26:fe:54:0d:58:c6:
         bb:ed:7f:b9:b6:4d:b5:56:03:38:6a:05:da:ab:38:a7:67:9c:
         49:e3:53:69:00:63:cc:57:c4:7f:86:7a:1c:a4:30:a4:b9:5e:
         27:fa:af:2d:9c:59:dd:96:54:fa:d0:3b:76:2d:45:75:c8:b9:
         28:bf:65:0c:c7:e6:69:66:ee:ef:d5:ba:27:30:b7:9b:12:0e:
         5f:3f:1d:02:0c:1f:6b:f1:85:2b:2a:98:5d:43:dd:ee:33:59:
         19:60:14:17:3d:45:b6:67:04:72:a9:3b:25:a6:41:44:8d:5d:
         77:30:65:18:fd:68:4c:55:09:6b:03:b0:44:7f:23:7c:ed:cc:
         2e:ef:cd:9c:f4:ef:b8:5b:3c:85:c1:e6:27:27:31:de:ee:3f:
         ea:c0:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:13 2025 by rpki-client