Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3aed086a-aa65-3eac-93fe-dd3de7053d48.roa
File:                     3aed086a-aa65-3eac-93fe-dd3de7053d48.roa (raw, json)
Hash identifier:          nJ28MhwM4b32XCp84Yn/NhyJiPP/2Qq5C8CERptBO1k=
Subject key identifier:   D9:ED:B2:9D:9C:40:22:38:CA:F8:FA:DE:1A:3A:84:91:90:14:19:1E
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B2761789910E6480027D9A5C0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3aed086a-aa65-3eac-93fe-dd3de7053d48.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     22070
IP address blocks:        64.99.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:78:99:10:e6:48:00:27:d9:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=4c45e26f-92b0-4f0b-a425-25cf360fc769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:7e:5e:b5:13:67:33:ca:b8:7b:2c:bc:d7:
                    fb:ad:96:23:0e:0e:3a:1d:c9:6c:d2:1d:18:2b:1b:
                    95:fc:c8:b1:0e:25:7e:5e:02:93:5a:d6:25:a6:12:
                    2b:30:7d:c3:64:b2:46:ca:1c:d7:d5:80:b0:e3:79:
                    74:12:da:66:d7:5d:73:db:d1:55:8c:d1:86:8b:90:
                    d5:14:59:44:20:95:4b:16:dd:9b:57:14:10:d5:ce:
                    0b:21:17:dd:76:24:25:69:9e:92:c1:fd:b2:9e:8b:
                    8c:e4:66:0c:17:30:ec:f5:7f:c3:2f:df:35:00:30:
                    4c:a5:05:e8:5d:6c:fb:eb:bd:49:ed:53:04:83:0f:
                    23:8b:24:d9:6d:03:a2:d7:fa:42:fe:e7:f8:ad:98:
                    b5:0f:ac:e3:1c:3b:15:73:3a:9a:98:23:d7:d9:e8:
                    12:89:cd:3f:cb:e7:08:c4:3f:23:52:88:6f:b0:be:
                    a9:d1:04:58:d8:c6:2d:0f:aa:ff:2f:1f:67:5a:76:
                    b2:2e:71:01:80:5c:67:3d:48:1b:95:cc:e3:b9:fc:
                    2c:34:00:56:58:e5:8a:19:db:03:d1:b8:78:e2:4d:
                    70:9e:71:e8:03:f0:4d:cf:ff:14:f1:f7:02:d4:6f:
                    4a:a1:c5:2e:4f:24:8f:1b:fc:f4:b9:60:2f:af:b8:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:B2:9D:9C:40:22:38:CA:F8:FA:DE:1A:3A:84:91:90:14:19:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3aed086a-aa65-3eac-93fe-dd3de7053d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:14:b4:d1:3d:cc:59:2d:91:26:69:72:73:c2:bf:6e:85:33:
         a7:6f:40:d7:0b:17:bf:c2:fa:6e:ba:21:d0:93:b7:f6:d3:c2:
         6c:0d:4d:0a:d2:65:13:e8:3c:3b:ec:be:40:71:b5:49:d1:0e:
         84:5d:68:24:3a:71:fe:63:0c:88:50:ab:18:0e:1b:1b:0d:eb:
         82:b8:ee:5a:85:a2:76:5d:26:18:78:6b:a3:a6:7a:a3:44:41:
         a1:21:f3:b0:84:24:0e:f9:f6:5a:f5:4f:ff:81:b3:d4:a4:78:
         f7:ca:d3:d3:81:cf:63:18:4b:9c:95:c8:bf:8f:74:6a:1f:c4:
         9e:12:dc:f4:4c:de:bd:79:58:98:63:32:82:fa:fc:c3:00:cb:
         f3:a9:47:39:f2:bc:ed:65:9d:e0:2a:e6:06:82:b8:a2:0d:eb:
         1d:77:15:6e:3e:40:fd:c1:85:f2:fd:a7:4c:a5:37:47:c8:6d:
         12:65:aa:ad:4f:22:34:dc:ec:86:3d:48:c1:7e:5a:4b:00:4f:
         7c:ae:ea:f2:79:3a:5d:aa:86:06:d7:f1:0b:d0:0a:ba:80:b2:
         01:0c:9b:cc:a2:51:7a:04:ca:15:4e:e5:90:79:b4:35:f4:10:
         e2:a2:b1:eb:33:6a:ff:b5:04:db:b5:1a:f3:4d:fb:d5:e7:b8:
         bd:2d:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:23 2025 by rpki-client