Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4841ade-bb75-3a7c-b33b-cc1013f36756.roa
File:                     d4841ade-bb75-3a7c-b33b-cc1013f36756.roa (raw, json)
Hash identifier:          eKlC/57ICwC4kCTVEkSqD8rCPyTn3l3CGADwAxHvLqI=
Subject key identifier:   1E:8E:A1:5F:E4:35:09:66:C3:42:DC:DF:67:31:4F:97:0D:21:00:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A963682DC519354C592E56B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4841ade-bb75-3a7c-b33b-cc1013f36756.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        65.44.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:82:dc:51:93:54:c5:92:e5:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=be1f2acb-4b53-4801-8fbe-57a5d31823e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:e9:b7:1f:d8:86:f5:44:63:9b:db:0a:10:
                    f6:d3:0b:8d:04:12:c8:e9:8e:6f:43:b3:98:8d:00:
                    5e:9a:2f:a9:44:a6:ac:0d:e4:be:03:b1:cf:82:ee:
                    47:67:49:35:dc:00:00:8f:fd:5c:66:26:a1:3e:84:
                    f2:e3:0a:92:50:ed:1b:0a:14:96:e0:08:c9:02:64:
                    65:97:a2:44:ea:dd:44:b4:2b:ad:50:eb:6b:b9:d0:
                    b6:70:35:55:b5:19:61:42:ee:2e:97:8f:c1:73:2f:
                    01:99:5d:28:37:08:51:ff:63:77:4f:5c:49:2e:b4:
                    b7:5e:00:3f:65:4a:47:33:0a:73:e1:26:bc:b7:61:
                    85:78:45:d0:4a:f8:be:cb:1f:06:90:4f:80:13:de:
                    02:82:63:f0:8d:47:71:76:0d:2f:de:41:6e:72:98:
                    05:1e:1d:a3:d6:fe:d4:fa:5f:d2:1b:e5:bc:ca:5a:
                    47:ba:85:ee:2f:81:b5:32:50:53:3b:56:16:99:b6:
                    44:12:2a:d9:b7:d3:6e:b5:8b:65:45:a3:f4:98:84:
                    ff:cc:c8:64:4d:69:e4:71:8e:f8:22:cd:f6:fe:4f:
                    c6:ff:90:94:17:04:ef:4f:25:06:40:7a:3d:09:dc:
                    3f:8e:bf:fe:28:90:91:6e:ca:8e:c7:72:65:fc:a6:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8E:A1:5F:E4:35:09:66:C3:42:DC:DF:67:31:4F:97:0D:21:00:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4841ade-bb75-3a7c-b33b-cc1013f36756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.44.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:76:c2:9b:74:78:eb:94:6e:85:c6:ad:a6:4c:e8:8c:92:15:
         ff:fd:bf:8c:f6:06:89:94:20:1c:ea:e3:31:f6:e5:0b:7b:ec:
         1e:13:1a:10:74:b2:37:c8:b8:f4:0f:b3:f4:4f:af:c8:61:04:
         a3:ca:91:e3:d9:44:f7:36:c7:95:12:99:24:50:b3:89:af:d8:
         07:b2:2c:5d:b8:23:ae:4f:cb:db:ca:f3:a7:74:6f:e6:10:b1:
         80:73:e3:3b:6a:0e:40:db:2e:a5:bf:bf:84:8b:72:90:ae:31:
         70:b5:66:21:1e:78:71:b9:30:89:30:55:60:a4:d9:7d:8b:37:
         4d:11:21:70:7f:fc:9c:8d:25:27:8e:fa:7e:d9:43:73:a8:b0:
         c1:9f:9e:d0:e8:55:9c:f6:84:53:04:2a:47:d9:4e:f1:df:57:
         8d:1f:72:0e:3b:32:e1:cc:b4:6d:13:97:bf:b7:53:4f:4d:f9:
         46:a3:c5:1f:05:51:99:02:65:04:8a:fa:9f:f3:73:c0:8e:fe:
         a5:23:be:a7:45:2f:55:41:ad:af:09:14:2f:07:9b:f6:5f:88:
         49:15:58:7a:2d:ce:58:e6:a9:96:e6:f1:ac:64:30:73:18:db:
         4a:dc:86:16:22:25:80:33:d9:9b:80:9d:6a:c9:66:de:42:5f:
         d0:06:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:55 2025 by rpki-client