Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/eefd5452-066f-3e01-a3d4-be66cfbe094f.roa
File:                     eefd5452-066f-3e01-a3d4-be66cfbe094f.roa (raw, json)
Hash identifier:          /RcAQTiPZODZH2Qy7DyfBGqOvnjISCkBhjk9AJJEO+A=
Subject key identifier:   88:70:F1:74:7A:28:49:36:B9:9A:F2:FA:34:B6:F3:18:3D:43:52:D8
Certificate issuer:       /CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6
Certificate serial:       010D0C9F4328584B153C1C9175FCF75069D0B6C0
Authority key identifier: 89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/eefd5452-066f-3e01-a3d4-be66cfbe094f.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     10753
IP address blocks:        162.251.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1c:91:75:fc:f7:50:69:d0:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=ddbd0fcb-2be5-4f3c-b024-9edaa5cd0348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:f3:28:4a:4e:86:bc:f9:8c:2c:7a:a2:f5:
                    6b:12:14:fa:62:b8:4a:52:73:77:13:2a:ce:bd:d1:
                    b3:7a:70:28:36:e7:d6:77:86:43:e7:5f:a0:54:9a:
                    d9:17:f4:8a:98:d9:07:76:25:18:04:5d:ad:d3:7f:
                    c5:e8:98:df:b9:05:c6:ee:d7:11:fa:d0:24:03:47:
                    e3:ab:69:23:ac:03:16:45:37:b8:a6:d1:a2:82:b7:
                    e6:7b:67:b5:95:3e:57:34:76:39:31:2b:b8:34:fd:
                    a8:e1:de:55:ff:41:86:6c:c7:c8:c5:e6:1f:34:a9:
                    9e:38:ab:47:af:47:49:5f:ed:b0:26:7a:4e:eb:f0:
                    0c:2c:8a:f1:c5:7b:e5:f9:f6:64:b9:ec:c5:98:4f:
                    cf:22:f5:20:52:24:d5:85:b9:a5:6e:e0:18:ba:97:
                    a2:42:50:81:36:71:ec:28:3e:89:32:09:4c:5f:0d:
                    ac:33:1e:21:75:6e:60:44:2c:c2:c1:bf:39:d6:35:
                    ab:47:fc:b1:dd:c0:75:8a:4e:1b:6c:8c:af:d1:5e:
                    d1:14:86:e0:d4:3a:32:2d:04:0d:87:c4:21:bb:4d:
                    61:e3:89:9c:11:1b:e3:0d:32:be:34:30:29:64:9c:
                    79:3a:fd:01:0a:f2:7e:55:87:8b:ac:95:67:9c:3f:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:F1:74:7A:28:49:36:B9:9A:F2:FA:34:B6:F3:18:3D:43:52:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/eefd5452-066f-3e01-a3d4-be66cfbe094f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl

            X509v3 Authority Key Identifier:
                keyid:89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:61:15:5e:78:2d:5c:d7:21:12:cd:55:b9:22:a8:42:82:
         e9:33:c3:1b:b4:0b:d2:7e:ee:ee:a0:e7:a7:c8:ab:28:95:19:
         c3:9c:8a:8e:4e:74:08:9d:88:c2:e1:0a:c5:a1:da:59:15:ad:
         0f:ec:b4:5a:da:ad:ec:d2:cc:10:40:32:ed:92:3e:be:56:4b:
         f4:fb:ed:ad:d7:96:a4:34:2e:4f:23:22:72:a7:84:3a:01:f5:
         06:33:6f:78:5e:0e:e9:7f:f7:0a:e2:c7:b3:14:9a:22:de:e1:
         92:0c:4c:34:f0:20:ad:fa:2a:68:84:7b:32:12:06:b2:ab:91:
         e2:f3:ee:fc:7c:3b:c3:b4:17:29:de:a8:b1:d6:24:2d:56:3e:
         5a:a0:21:72:2e:09:72:ee:11:d8:68:d3:d5:34:fb:93:1d:85:
         24:8f:b0:e5:6f:da:20:fc:75:d7:26:6d:69:6e:0e:3c:fa:e3:
         36:f9:80:aa:73:c7:3f:15:37:22:fe:af:03:e3:f6:dd:8b:5f:
         fe:46:9c:33:6f:bd:00:1f:bb:46:9d:e9:0a:65:c4:ec:b8:d5:
         5d:62:c0:e5:74:b4:76:7e:ba:4f:20:1a:18:05:e5:25:f4:3b:
         7b:b4:34:34:4b:2f:75:f8:bc:31:33:40:a8:97:c1:79:32:a0:
         2a:13:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:20:34 2025 by rpki-client