Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b639cd18-4b23-39da-852d-dede9b67f7e7.roa
File:                     b639cd18-4b23-39da-852d-dede9b67f7e7.roa (raw, json)
Hash identifier:          K88ZGsOz0Q7ex4M2b5mJVdGysmwROqhLuoZ0tJqM3vE=
Subject key identifier:   C4:2C:78:79:5A:8F:7C:C2:D1:D8:97:03:55:5F:83:D7:D6:79:81:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8B0B6ECE8E2BB2E5E93D6480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b639cd18-4b23-39da-852d-dede9b67f7e7.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        23.220.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:6e:ce:8e:2b:b2:e5:e9:3d:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=3d85a66f-9ecc-4155-8cf0-82bd66bbf270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b0:75:c5:4f:d7:e1:e3:e3:78:b9:54:22:a1:
                    30:c3:40:e6:d3:2d:27:65:fa:05:a0:c2:ef:65:dd:
                    83:ee:b7:74:b0:68:de:53:d1:e0:06:89:f3:ef:df:
                    26:1c:d7:02:8b:31:9b:c1:66:2f:de:c9:be:18:6a:
                    4c:a8:b4:7c:11:ef:c9:26:22:52:29:d1:c5:24:2b:
                    80:84:e3:53:a6:40:79:92:b5:b8:9c:7d:df:af:e5:
                    08:8d:be:19:ce:b4:18:b0:e4:1c:07:a0:71:5c:52:
                    8b:a7:48:60:d4:64:f9:8b:d1:f9:36:18:33:94:f8:
                    05:6c:86:83:79:99:52:e0:90:1e:ed:78:7a:79:4d:
                    5c:0c:a5:39:9f:7d:f8:41:1a:06:29:0a:a2:e0:82:
                    eb:60:08:61:93:ea:41:0a:62:87:d7:99:4c:12:92:
                    44:2b:58:b4:7f:f6:d6:23:80:f8:fa:2a:38:c6:47:
                    d0:6b:1d:65:19:7a:0b:9d:e4:4b:12:a2:1d:8e:20:
                    50:0e:18:6a:4c:36:ab:0b:6f:e8:27:41:96:88:09:
                    51:23:cf:fe:89:72:b0:8a:04:0f:fb:c1:8e:b6:68:
                    95:e8:27:7c:71:88:69:ca:22:5d:2c:b7:ee:f1:29:
                    f1:54:fe:3a:29:6d:e1:f5:03:34:30:ac:2d:95:50:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:78:79:5A:8F:7C:C2:D1:D8:97:03:55:5F:83:D7:D6:79:81:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b639cd18-4b23-39da-852d-dede9b67f7e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:63:83:a1:85:d8:dd:4d:a8:45:e4:e6:cd:a4:9c:d3:c8:f6:
         81:93:d0:e7:f0:f4:0a:91:eb:1b:44:a2:81:f5:be:8b:38:d2:
         45:dc:2f:99:a5:4b:ac:71:4d:56:0f:42:08:9c:3b:dd:06:e5:
         40:e8:db:0b:b7:d4:2f:19:21:11:84:c4:a2:70:d1:0e:e0:31:
         90:50:36:55:02:fa:b7:5d:3b:b1:ec:00:c3:c3:b7:39:56:8a:
         c7:d3:91:34:e3:5d:5f:18:8f:09:0a:e2:04:a8:e7:d0:fc:3c:
         3a:57:c4:a1:05:a5:e4:65:f1:58:e4:44:22:9f:a1:20:e5:81:
         f7:79:06:78:bb:dc:2a:68:7d:b2:5d:f6:79:81:5b:2b:6c:32:
         c7:a2:f4:2c:8a:e0:37:ab:d8:84:a1:2f:82:f8:90:2f:9b:a7:
         12:e9:c9:8c:12:f5:14:cd:8e:16:66:85:33:d7:0a:fc:56:f2:
         88:cd:83:eb:ba:fd:9b:7a:3f:99:a1:ba:b9:26:ec:26:83:21:
         07:a2:9b:22:13:0c:18:34:f3:e1:79:07:43:c2:55:27:26:12:
         0d:63:bd:bd:a4:be:62:8c:13:50:89:77:1b:49:19:dc:bb:02:
         8a:d4:a1:44:fc:9d:27:e3:44:8f:fc:ef:66:27:b0:fe:24:14:
         2c:85:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:35 2025 by rpki-client