Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa
File:                     6ede325a-ba24-308c-a1a3-54012fa276ef.roa (raw, json)
Hash identifier:          VZqyw8KPXiZYwdFakNyQqttEwoaJNJAe/5Lc6VpLans=
Subject key identifier:   F3:86:02:17:39:0E:DE:22:9B:22:D2:F8:42:24:0E:77:EA:2A:55:1F
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F4328584AADF10AC8C95BE6F957E685B0
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     46650
IP address blocks:        199.85.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0a:c8:c9:5b:e6:f9:57:e6:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=b605d23a-c35f-4fae-9d55-b96a1fa05c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:b3:d4:22:9f:51:0e:0c:51:7c:55:51:56:
                    6b:a4:0d:5f:71:7b:62:8d:43:8a:9c:a9:d7:ed:fc:
                    c6:42:cd:31:eb:88:39:d2:dc:67:93:d5:2a:e0:58:
                    9a:21:6d:50:43:54:e6:5a:6f:30:d6:1a:f7:8b:40:
                    7f:67:f0:96:1e:f7:9c:7f:29:3f:6a:81:75:fc:fd:
                    c4:5e:95:33:38:e7:c7:28:7b:fb:42:fd:c2:53:2b:
                    f0:6c:b4:82:61:e3:f4:5d:9d:e8:c0:e8:ed:59:fb:
                    ec:a6:be:20:fc:3d:de:f1:61:34:58:73:e4:82:f9:
                    02:19:54:a8:8d:a4:5b:51:11:a3:ce:64:64:05:eb:
                    7b:98:8c:8a:ab:05:1e:60:b6:8d:e4:d2:2a:4f:7e:
                    1b:7e:b3:9d:58:1c:3c:b6:16:50:51:d5:64:4e:ff:
                    a1:b4:89:72:bb:f5:8a:ba:c6:b5:b6:8b:c6:2c:e2:
                    10:27:7b:b5:27:70:c9:14:44:e5:ea:93:a4:42:79:
                    44:af:a8:3c:8b:a8:25:22:3a:9f:65:ab:82:d7:45:
                    04:62:d9:92:e3:f7:0c:60:65:04:b6:06:77:74:94:
                    31:b3:6b:86:f6:30:53:dc:97:5b:61:e2:8b:44:af:
                    dc:20:e6:1a:57:ea:9d:58:c5:f0:09:6f:e7:da:7a:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:02:17:39:0E:DE:22:9B:22:D2:F8:42:24:0E:77:EA:2A:55:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.85.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:36:37:1c:59:3d:bb:72:c4:65:a9:6e:66:fd:8c:cf:06:dc:
         99:f8:a3:2c:5c:29:84:7a:8b:e6:38:19:31:0d:99:82:49:34:
         26:8c:ba:02:e3:e1:e8:6b:88:68:f4:6f:1d:7d:60:09:63:03:
         8b:9f:65:da:01:c1:27:e8:98:99:73:49:bc:04:3e:c2:73:8d:
         a8:75:14:fe:68:00:3e:77:07:59:df:d0:21:1f:87:1b:9d:3c:
         9d:30:38:6b:56:b7:b7:9f:1e:0d:ac:44:d1:34:a0:ad:cb:71:
         aa:2b:47:8a:23:5c:7b:7d:d6:69:31:e3:ad:95:84:96:fc:cd:
         43:21:da:d2:54:d1:fe:71:8b:ab:e2:01:91:f7:06:b9:04:f4:
         69:12:ba:b4:df:30:62:ba:b6:4f:39:96:ff:20:3e:27:fd:ef:
         ca:c5:76:6d:eb:e9:36:54:0c:a6:bb:2f:60:64:88:4b:c1:f9:
         bf:81:76:b7:fc:ab:93:80:1e:40:8f:2b:93:2c:a5:5b:3a:68:
         97:a5:ad:5e:00:bf:4b:31:e5:b3:45:3d:88:4e:e3:18:84:17:
         e8:6c:63:bf:1a:30:3e:3c:da:46:20:7c:09:8b:66:ae:d3:1e:
         13:f6:b4:c9:d2:bf:d9:29:80:20:78:aa:11:92:ed:9c:3d:71:
         c2:3a:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:51:49 2025 by rpki-client