Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1b98a49-4c16-3eb0-99e8-1fb822917787.roa
File:                     d1b98a49-4c16-3eb0-99e8-1fb822917787.roa (raw, json)
Hash identifier:          48Yg4AWUcWgnUnXT4FBlDUdN4XMoTe8PqLEk8T7Omic=
Subject key identifier:   6F:77:E1:18:52:2B:01:FD:A5:7E:42:33:33:4D:D1:1E:28:A7:8B:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD01FA8A0EAC74460ECF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1b98a49-4c16-3eb0-99e8-1fb822917787.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33489
IP address blocks:        162.17.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:01:fa:8a:0e:ac:74:46:0e:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a399a7ad-9f4e-48b5-86f3-6f851cfc751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:81:73:b2:5a:3e:43:13:ed:31:7d:8a:59:
                    7f:36:14:82:fa:60:a9:54:82:01:d5:20:d2:1e:bb:
                    4a:3e:67:33:94:85:33:07:d5:78:03:06:7a:7c:26:
                    ef:0a:c4:2d:62:07:cb:8d:72:2a:95:b7:00:37:1d:
                    43:d3:e8:ec:39:7d:43:a7:6c:8b:a4:f4:4d:04:fc:
                    0c:99:9e:4c:3b:84:a6:99:a9:a9:f6:94:1b:ac:1a:
                    65:bb:52:05:4f:d1:44:5f:2c:af:d0:bf:d1:06:b8:
                    67:44:bf:94:4e:8c:c8:9a:47:e9:78:c0:8b:bc:09:
                    de:5e:09:8b:4f:60:ac:06:04:11:51:19:db:8e:11:
                    eb:70:d9:45:e1:60:d4:0d:cf:6c:4e:a1:c8:ed:86:
                    6e:9d:bd:df:3d:7d:1b:a2:1a:77:78:26:68:b0:5c:
                    c1:e3:8f:5c:3f:81:9e:c7:cb:a0:9c:e6:d1:ae:43:
                    86:82:a1:01:b3:bb:65:2d:40:4b:8a:47:95:9e:ea:
                    6d:fe:73:b7:cc:80:f7:7f:bc:48:bb:54:86:34:6b:
                    cf:59:f2:38:11:d0:b6:ef:f7:b7:5f:12:58:8f:d8:
                    1e:b4:63:c7:e2:4d:89:2e:86:1e:8d:84:9b:e3:03:
                    59:40:86:26:55:70:3d:d4:bc:4a:34:a9:62:2c:0e:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:E1:18:52:2B:01:FD:A5:7E:42:33:33:4D:D1:1E:28:A7:8B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1b98a49-4c16-3eb0-99e8-1fb822917787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.17.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:0d:6a:eb:57:54:09:23:26:06:54:a9:c3:fe:85:3b:e2:e7:
         1a:2c:24:c3:b0:c5:7d:d9:5b:c3:c3:ee:9e:61:f2:13:ba:59:
         ee:03:95:33:6d:80:7d:b5:56:b3:f4:c9:86:76:85:dd:48:2e:
         4a:52:ce:35:8d:ee:b3:bb:e3:d7:af:0f:c6:74:37:da:a8:92:
         47:fe:bd:03:e1:15:ed:bb:15:e0:e1:77:43:c2:09:32:cb:e2:
         07:b2:19:f0:25:21:19:e5:90:b1:24:79:ac:5d:37:18:c8:65:
         f6:04:b2:28:ea:76:cc:c7:cd:4b:d3:42:c2:cc:07:3e:c2:d7:
         a9:76:8a:04:c0:bd:01:18:2a:98:00:9c:9e:52:c6:2c:11:f3:
         43:44:a6:0a:93:99:5e:1c:64:16:e0:5e:0d:75:04:50:72:17:
         f7:72:cd:c2:f5:ca:07:f4:d1:48:df:49:f3:86:6f:dd:7e:35:
         3d:bd:69:90:8f:ca:dd:a5:45:2a:57:a1:6c:6a:0d:fe:ef:ff:
         fa:d5:1e:2b:63:bd:ff:4c:d1:99:7b:d2:4b:83:e5:c5:cb:f5:
         d1:b3:1e:89:fb:54:d1:7f:28:b0:ce:f7:aa:5c:9a:d6:e5:9d:
         0f:bc:40:23:85:f7:b9:15:a7:5c:a2:24:70:48:af:de:19:2e:
         64:82:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:19:09 2025 by rpki-client