Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
File:                     abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa (raw, json)
Hash identifier:          x4WUuFoNa03hbxbvfxwYPrZa0h0qhCMMBqHZxdmPvgY=
Subject key identifier:   4E:61:D0:56:8A:B9:84:03:91:67:C7:5A:F8:44:5B:FD:9B:0C:80:9D
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584AB379BCC3D2B85EEF80523D40
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
Signing time:             Thu 31 Jul 2025 12:35:45 +0000
ROA not before:           Thu 31 Jul 2025 12:35:45 +0000
ROA not after:            Wed 29 Oct 2025 12:35:45 +0000
asID:                     46620
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:79:bc:c3:d2:b8:5e:ef:80:52:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Jul 31 12:35:45 2025 GMT
            Not After : Oct 29 12:35:45 2025 GMT
        Subject: CN=a96786d8-02a4-4e1e-b1a3-20fc569f80b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:5c:e5:7e:62:33:e4:0c:2b:0b:56:33:fc:
                    0f:8a:2f:ee:b3:58:a7:c9:41:a1:c4:f5:8a:6c:61:
                    24:5b:31:2f:bd:ee:47:50:69:5c:00:ec:6f:84:40:
                    cb:33:c7:3f:b1:2c:5c:b2:5c:dc:65:9d:dd:5f:be:
                    b4:6f:c1:d8:3c:04:94:2e:c2:3e:ec:0f:2d:dd:42:
                    c2:a4:7d:6d:b2:97:59:12:47:3d:7a:cc:85:d7:2b:
                    4b:8b:4b:8f:80:7d:f2:22:58:83:75:d2:55:ae:1c:
                    ba:6f:ef:00:de:40:ee:71:ef:a2:50:e0:5f:af:13:
                    6c:ce:0b:4f:a4:63:9a:d6:ad:74:45:d7:0a:b1:ee:
                    4d:0b:8b:0b:6a:fa:ff:73:39:b6:d5:03:85:08:41:
                    95:b9:d2:35:dd:df:f8:ec:e5:5a:c6:07:e9:f1:65:
                    14:38:63:01:06:42:e8:0e:f9:4d:0e:ed:4f:21:b2:
                    f9:ec:3e:ab:53:e9:33:ff:6c:c2:fd:e9:35:0b:88:
                    be:a9:6e:67:76:72:41:d0:e2:06:2c:54:54:84:34:
                    d4:fc:3c:39:56:ae:1e:a3:08:f0:c2:55:99:c4:c1:
                    ca:51:27:a8:bf:34:f4:46:f3:8a:fa:ce:ef:f4:b9:
                    b5:ba:5c:92:9d:0b:7a:ee:67:3f:a6:1e:17:fb:65:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:D0:56:8A:B9:84:03:91:67:C7:5A:F8:44:5B:FD:9B:0C:80:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:73:65:0e:5a:25:4b:1b:38:2f:d7:c3:20:f5:9d:28:50:97:
         03:3d:d1:00:91:e9:e1:77:28:b8:1d:31:61:b6:d6:8e:49:a7:
         70:37:9b:33:d6:86:57:22:2f:ff:60:02:e0:4d:56:29:03:e3:
         ca:b7:32:d5:7f:c1:7d:9f:a4:4a:36:c0:4a:43:50:27:ac:33:
         2c:77:05:92:19:e8:b0:d6:56:b3:f5:75:38:22:68:2a:27:8c:
         ba:df:54:e8:ba:81:7d:26:e8:17:e7:41:25:4a:b6:52:0b:24:
         39:37:3c:bc:e3:7d:8d:6a:3b:5c:a1:af:79:5b:23:77:c8:90:
         19:db:41:7f:48:d7:c9:6b:9b:e1:a9:53:78:f8:51:84:0d:6e:
         bd:9c:54:f9:65:fd:e7:02:c3:d1:fa:bb:55:58:0a:4c:da:13:
         7f:9a:77:ed:3a:10:29:d4:da:5a:b4:8a:76:46:da:52:65:79:
         66:a6:a4:91:dd:0b:3a:a0:26:fc:10:1d:3c:d8:07:2b:13:1e:
         3a:b3:fc:18:fe:7c:a3:bd:fe:a9:d5:af:1b:41:69:79:2a:38:
         21:5c:4e:38:6d:ea:3a:98:1e:da:35:2d:89:bc:d1:4b:6d:1b:
         f3:7e:68:4c:4a:18:1e:62:cf:f3:75:36:17:3b:cc:1a:f1:b1:
         3b:bc:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:24:14 2025 by rpki-client