Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
File:                     308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa (raw, json)
Hash identifier:          adkhhNwI5XfDeidqKbYi2M8cuj6j9KhXFGcfmKK/hVI=
Subject key identifier:   E8:5E:F3:2E:A3:98:EB:C9:F9:9A:90:76:DF:35:C3:E9:C9:7E:CC:41
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584ABD4BA38F2D756A80ABAD0640
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        207.202.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a3:8f:2d:75:6a:80:ab:ad:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=9f14ece1-53c3-45bb-a838-645541962a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:a5:a4:45:50:ec:04:3c:f5:9a:3a:24:47:
                    77:99:a4:1f:33:9e:dc:5a:b4:93:86:02:68:8e:02:
                    63:59:5c:52:83:d5:e2:75:d3:71:12:c3:e8:90:da:
                    ef:ad:85:3c:8d:28:87:b9:3a:05:7f:52:2d:96:53:
                    1f:00:99:4d:50:a3:7c:90:7f:7c:d9:15:15:4c:c2:
                    09:b2:fa:04:5d:03:45:4f:95:19:7e:f3:04:ca:22:
                    f7:57:67:2c:57:03:f9:d3:a9:fd:79:d7:01:4e:f5:
                    21:da:2b:4b:6e:d5:0d:cb:39:e3:e7:bb:09:a0:d3:
                    c9:39:be:27:45:31:23:59:ab:b3:c9:f8:79:38:3e:
                    30:3a:eb:c6:02:9a:83:fd:cb:8a:ed:a4:dd:fc:f2:
                    b0:a9:fc:45:51:5a:22:5a:60:fe:1c:39:e3:ed:b5:
                    cd:0c:05:38:ed:d4:a9:dd:a3:f3:1f:77:fd:03:9c:
                    2e:57:9f:34:bc:ec:b3:19:1c:1a:61:b7:1a:6a:67:
                    ef:25:7c:0d:18:1e:cc:f6:8a:00:32:af:41:d4:bd:
                    b2:f7:79:43:ae:e1:32:2b:8f:31:70:51:28:f5:6b:
                    f9:cf:9c:69:88:43:25:68:aa:73:c1:03:a6:31:96:
                    b9:dd:b2:3c:c1:78:c1:b2:ca:d9:4e:00:da:cf:a5:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:F3:2E:A3:98:EB:C9:F9:9A:90:76:DF:35:C3:E9:C9:7E:CC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:c1:87:46:a2:c8:5d:29:62:be:17:6d:8d:63:86:8c:ad:
         92:96:75:77:9c:a7:59:b2:31:e1:b0:fa:da:1a:b2:3b:49:52:
         92:a6:ae:c4:e9:c0:8a:15:fb:f3:24:c7:60:a2:cd:be:f5:85:
         3f:6a:17:99:f9:d8:71:6b:34:0a:e9:4a:da:f1:38:ea:32:83:
         4e:82:61:ce:75:06:48:07:64:ef:73:62:22:1e:ac:97:b6:01:
         d3:0e:4f:d3:c5:b8:04:77:a3:7a:c8:75:22:e8:eb:30:ee:f3:
         49:68:48:5a:a3:55:87:10:21:fc:e0:e4:97:2b:d0:02:2c:72:
         68:19:59:b8:62:56:3d:51:f1:5f:34:7f:41:f8:70:89:80:fe:
         21:af:f5:26:42:4f:f0:c4:74:6b:ed:c4:30:45:0e:cd:0c:48:
         37:40:7b:4c:0c:cb:a0:ba:0e:13:2a:55:a9:c1:3f:2f:b8:f1:
         ee:fe:27:90:0a:ad:75:df:e1:f9:86:4c:f8:b5:d2:04:fc:24:
         0f:f7:34:65:28:96:20:20:a0:2a:91:77:ad:46:44:29:b2:d3:
         e7:9f:62:f4:f5:31:d4:88:cf:55:70:f9:3e:2d:a9:61:4b:c2:
         05:f9:fa:0f:d4:c2:39:67:d2:cf:cb:43:c4:8f:4f:5e:07:96:
         c7:7c:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:37 2025 by rpki-client