Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/1122fe2e-587f-3b06-b476-602db9a2cc67.roa
File:                     1122fe2e-587f-3b06-b476-602db9a2cc67.roa (raw, json)
Hash identifier:          n4lYd337YiLOwlmmV+YlhvK5BquSthbs2YVKbfN/SIo=
Subject key identifier:   D3:E7:23:D7:6C:F8:6B:02:56:3D:74:ED:89:51:C4:CE:B3:B9:1A:7C
Certificate issuer:       /CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
Certificate serial:       010D0C9F4328584AA8724771B8A573F5D2CD3E20
Authority key identifier: CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/1122fe2e-587f-3b06-b476-602db9a2cc67.roa
Signing time:             Sun 27 Jul 2025 13:46:49 +0000
ROA not before:           Sun 27 Jul 2025 13:46:49 +0000
ROA not after:            Sat 25 Oct 2025 13:46:49 +0000
asID:                     10494
IP address blocks:        65.75.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:72:47:71:b8:a5:73:f5:d2:cd:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
        Validity
            Not Before: Jul 27 13:46:49 2025 GMT
            Not After : Oct 25 13:46:49 2025 GMT
        Subject: CN=86af4e9d-e807-411e-a9af-48a291aa564b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:32:d0:40:29:f0:05:17:d4:fb:a8:fb:33:
                    39:fb:0b:f7:2c:25:4e:e9:c0:1b:18:22:a5:cb:f1:
                    90:f6:53:12:37:8c:2c:49:2b:a9:02:f6:3d:f4:d3:
                    4d:fa:bd:5e:c6:5f:bc:66:86:df:69:00:41:36:50:
                    d3:9d:fc:85:b7:68:63:b9:0f:05:c2:5d:67:78:68:
                    af:5f:7f:7d:78:5e:fd:97:2c:86:5f:22:e6:8e:25:
                    04:7c:b3:35:05:d0:a4:72:50:52:39:bb:bc:dc:14:
                    90:86:ad:46:8b:3a:e3:e1:01:f4:fe:dc:aa:19:a7:
                    d7:57:0e:55:d6:35:9f:b3:da:2e:d6:fa:f2:92:ce:
                    1c:0d:ca:69:ef:e4:57:6e:2e:19:6e:59:e9:d7:4b:
                    07:21:52:6c:a9:69:66:96:d0:fc:13:dd:a3:15:3e:
                    76:38:12:a6:8a:98:31:dc:83:8a:6e:da:8c:89:fe:
                    b3:55:e7:33:18:ca:35:6f:ed:67:16:dd:16:db:7f:
                    f7:2f:65:9d:81:72:35:f3:6d:fe:86:16:04:56:84:
                    de:6a:7d:93:8f:87:b3:02:6b:3f:2b:a5:90:d9:9d:
                    29:cb:15:ba:d1:32:b3:ae:b6:81:7b:dc:17:d8:93:
                    13:d4:81:d7:bb:f2:9c:56:54:ef:d3:69:c9:3a:73:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:23:D7:6C:F8:6B:02:56:3D:74:ED:89:51:C4:CE:B3:B9:1A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/1122fe2e-587f-3b06-b476-602db9a2cc67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:2c:e6:34:75:1c:38:35:56:1f:34:ff:36:72:d1:b5:35:
         fb:c1:9c:1e:5e:86:ac:1b:fc:c3:79:24:7f:f1:49:c5:ae:aa:
         97:5d:58:f1:bc:b1:ed:46:50:64:f5:bf:2d:27:4c:ab:9c:ce:
         e7:5c:7b:37:a5:40:eb:38:94:7e:05:88:7b:b5:2c:a4:1e:36:
         8c:7b:a4:2d:16:36:51:ad:44:8b:13:f8:c3:78:cd:97:62:b7:
         23:38:79:5b:71:72:86:aa:5e:2a:d1:8d:66:20:c9:78:b0:f1:
         5d:2c:ac:39:7e:5e:97:b1:f4:65:26:d6:9b:31:e0:60:df:a7:
         4a:96:67:c9:1b:85:21:64:48:14:0b:ba:4e:b4:1a:74:a9:1e:
         f9:aa:49:81:a8:28:2a:80:2a:ae:3d:e6:62:6e:92:e1:4d:5c:
         7e:e9:63:a6:31:c9:06:e1:01:6a:86:2f:0b:9b:bc:2e:33:07:
         20:10:fb:28:f3:38:75:0c:c6:19:5b:5f:55:51:8e:75:67:56:
         8f:dd:a8:b2:35:e6:41:6a:45:9a:98:1a:00:54:e6:34:ad:cb:
         f3:f6:ef:49:a4:8d:36:1f:26:02:4a:3c:b4:34:ff:0f:87:98:
         b7:de:13:75:8c:3a:26:1f:bc:b1:28:7a:68:5f:62:49:9d:f9:
         17:dc:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:06:40 2025 by rpki-client