Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/d618d1ce-8c82-3341-ac9f-57f25ec70024.roa
File:                     d618d1ce-8c82-3341-ac9f-57f25ec70024.roa (raw, json)
Hash identifier:          AlckahLZPk0lkz4hS8ZjXwSASVw5FyEpBnLWzqRtAWY=
Subject key identifier:   41:02:DA:44:E9:E2:B8:FC:A6:CC:4F:F7:1A:5A:93:8C:ED:C9:E4:E2
Certificate issuer:       /CN=54d4a1ca-3709-4693-b886-f80eff68da2a
Certificate serial:       010D0C9F4328584AA42B751DE522A4FDD86022E0
Authority key identifier: 79:EF:4C:E8:05:82:45:67:8A:F8:68:04:E1:BD:35:51:AA:4C:88:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/d618d1ce-8c82-3341-ac9f-57f25ec70024.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        208.82.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:75:1d:e5:22:a4:fd:d8:60:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d4a1ca-3709-4693-b886-f80eff68da2a
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=99c25e06-ff75-4ce5-a004-646a186d2bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:37:98:da:68:6a:64:82:85:51:d5:45:1c:
                    f2:e4:e4:dc:0f:d4:48:3f:85:03:1c:13:39:41:78:
                    0c:73:06:bf:a4:0c:b1:c2:7f:56:0b:a8:59:f2:4e:
                    18:db:ac:7f:72:ec:a0:f6:d7:1c:c9:eb:ff:40:24:
                    f5:4a:fa:2e:51:e8:78:ca:1f:77:fe:e1:e9:5c:cc:
                    6b:86:90:1d:ac:08:7f:fd:58:34:cc:c6:b4:a0:e8:
                    a0:88:6b:9b:cd:95:63:d0:d6:f2:66:a4:50:97:49:
                    41:7d:67:3a:e5:69:91:17:de:e1:23:9c:f9:c3:a0:
                    47:31:41:38:7a:bd:1f:76:c9:a7:9d:dd:e6:d9:51:
                    d5:c2:71:32:6e:83:3c:b9:d1:6a:51:2a:f4:42:1b:
                    ae:0b:9c:6b:15:28:cf:16:b6:07:98:b1:69:4b:ef:
                    11:36:04:f5:3e:2e:0d:a7:a4:75:d0:33:eb:30:0d:
                    37:be:36:c9:08:fb:0e:79:96:d2:ab:dc:25:83:9a:
                    a8:56:37:fe:00:3d:b6:10:e0:83:7c:fb:cc:8f:49:
                    d7:43:14:b3:0b:64:da:8d:92:15:bb:f2:0c:4e:98:
                    30:cc:76:be:80:fc:3c:f3:50:ec:f2:51:29:61:b7:
                    7d:81:dd:b6:30:1b:fe:f5:2f:f7:bc:10:37:94:c0:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:02:DA:44:E9:E2:B8:FC:A6:CC:4F:F7:1A:5A:93:8C:ED:C9:E4:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/d618d1ce-8c82-3341-ac9f-57f25ec70024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.crl

            X509v3 Authority Key Identifier:
                keyid:79:EF:4C:E8:05:82:45:67:8A:F8:68:04:E1:BD:35:51:AA:4C:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:79:18:25:62:ae:c8:f4:ed:0a:32:fe:7f:12:11:c5:4a:04:
         7d:03:74:27:f0:27:ef:4b:4b:74:a6:8b:db:43:47:fe:71:16:
         e7:d1:72:0a:31:36:71:82:f7:e5:3c:ea:67:d6:67:b7:98:36:
         0d:27:f5:e5:e9:f5:22:cc:db:6a:3d:51:48:21:b0:23:5a:64:
         fe:d2:a5:72:40:ba:a4:3c:48:4a:1c:de:3f:c4:c9:18:92:a6:
         54:fb:a8:83:22:9a:2f:86:a8:74:e9:04:c4:f3:11:62:a3:88:
         be:ba:25:9c:32:2b:04:15:8e:29:dc:d0:3c:f3:7b:2f:9e:1f:
         41:52:7d:44:b1:fe:8b:3a:96:7c:4b:a1:25:be:41:c6:7a:27:
         c6:95:0e:4e:9d:13:13:4c:1e:b8:85:be:a3:11:eb:54:40:cb:
         50:e8:ae:69:3f:87:c0:c2:4e:37:6c:23:03:64:8f:d5:db:b2:
         5f:43:63:5a:78:29:78:d2:7f:68:28:74:30:6d:bc:d4:3b:a3:
         b6:48:34:13:a6:2f:15:9e:17:b0:bb:f9:3d:14:93:b1:47:99:
         e4:b1:54:ec:7b:6a:db:3e:f6:b7:b0:05:9c:e4:37:b1:f7:8a:
         b5:83:65:b5:71:a8:46:32:58:7a:92:5e:1b:32:3a:ea:0e:ba:
         fc:21:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:15 2025 by rpki-client