Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa
File:                     911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa (raw, json)
Hash identifier:          deUJE0Zdteu2yNaQ3impGotgZIDcsKNfJUiBr+V/xIE=
Subject key identifier:   F9:30:2C:67:14:D8:37:26:06:ED:1F:BD:B6:CB:59:32:8B:C1:0E:27
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AA160CCBD067C0C53872AFE00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11537
IP address blocks:        162.252.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:cc:bd:06:7c:0c:53:87:2a:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a70f495a-7993-4769-ad18-7978d643d9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:27:cd:a6:ce:19:b6:1c:b4:3a:93:f4:55:
                    e7:ee:f0:d8:fb:72:82:87:1a:4e:5c:27:f1:fa:39:
                    c2:ef:05:b6:b1:d7:0d:12:70:a9:d9:b5:e8:ae:d4:
                    e3:5c:ea:d9:8f:8c:4c:23:87:f6:48:4f:ab:a7:f3:
                    ca:bb:68:0c:98:c1:85:8a:b7:a6:64:99:52:2e:04:
                    35:9f:cb:bc:e1:22:66:fb:12:9e:0b:5a:8f:cf:10:
                    7f:fa:0e:18:8f:7f:3b:bd:c9:af:04:27:86:5f:67:
                    ea:77:ab:2e:f7:ce:ac:95:41:57:de:af:ce:a1:0a:
                    60:6f:bf:3c:04:ac:8d:22:e1:03:dc:e2:8f:20:8b:
                    20:7f:39:38:cb:76:d9:23:3e:e1:91:b1:80:bc:5a:
                    04:b6:c4:dd:a7:c4:f0:b1:d0:f1:46:82:3b:a3:58:
                    27:4f:21:32:b7:cf:b3:88:c6:57:0d:0b:4e:6b:e2:
                    ac:1e:99:4e:a5:cc:6e:c3:12:fe:03:62:f0:e7:cc:
                    50:65:96:24:cf:5c:e8:0a:f7:23:44:c7:0d:85:cd:
                    b5:3e:2c:a7:72:37:87:80:1d:32:cf:46:58:6e:4d:
                    b0:45:20:38:e2:41:1c:ab:a6:df:6d:ef:f2:4c:4a:
                    a9:a4:30:50:41:a2:2a:29:28:f5:96:b1:10:30:0d:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:2C:67:14:D8:37:26:06:ED:1F:BD:B6:CB:59:32:8B:C1:0E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:6e:f9:8b:7c:f1:81:36:69:92:51:2f:63:4d:32:29:c0:
         46:27:c7:eb:41:65:f0:2b:1b:0a:f6:01:86:5a:8c:b9:7b:8f:
         a2:8b:7d:64:8e:9b:e0:62:64:bc:fb:82:7b:91:ab:af:12:b3:
         a2:09:a9:ce:d0:8d:5d:c6:52:c2:5d:47:4b:86:db:75:73:5c:
         22:f2:6f:a1:34:79:9f:bf:31:e5:d6:5c:0b:7b:83:a6:09:fb:
         4e:0a:49:f6:09:16:9a:6d:a5:a7:8a:6e:14:87:eb:58:85:27:
         cc:00:ae:ff:39:89:58:40:65:9c:25:db:2b:29:2d:bb:d8:b2:
         33:a0:f6:c0:d9:42:ef:bd:f1:b8:5f:64:99:24:d9:68:91:a5:
         f6:17:d9:e0:e8:ba:28:73:f2:9d:c9:5c:08:7a:a6:ab:cc:c8:
         9a:c1:36:ef:a2:64:f1:dc:29:8a:84:95:d2:f9:f1:df:6a:e8:
         4f:85:50:86:9d:f9:0f:70:19:0f:df:6b:47:ba:b8:e8:87:ee:
         03:8d:39:82:09:12:11:fa:b7:bb:bf:1f:16:96:17:5b:1a:86:
         01:51:73:5f:36:69:0a:67:73:ae:93:96:05:3c:26:39:e8:12:
         ce:78:7d:40:ca:04:62:f9:d1:3e:54:36:64:75:11:ae:bc:5a:
         e1:a6:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:46 2025 by rpki-client