Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa
File:                     c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa (raw, json)
Hash identifier:          6dmRE6Up2nEqq9JXr4eYBa30qW4HsIV/x8ZONPvkB08=
Subject key identifier:   2F:65:DE:19:80:FC:02:73:2C:A8:E6:B5:89:74:94:E9:40:BC:2E:3A
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584B12EF336762C1F8B7F723EA00
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa
Signing time:             Wed 03 Sep 2025 17:14:13 +0000
ROA not before:           Wed 03 Sep 2025 17:14:13 +0000
ROA not after:            Tue 02 Dec 2025 18:14:13 +0000
asID:                     14639
IP address blocks:        198.89.160.0/20 maxlen: 24
                          198.89.176.0/21 maxlen: 24
                          198.89.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:ef:33:67:62:c1:f8:b7:f7:23:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Sep  3 17:14:13 2025 GMT
            Not After : Dec  2 18:14:13 2025 GMT
        Subject: CN=4ee99af3-af49-45f3-a5c6-e40b299a91bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e9:61:5b:24:71:28:65:55:3d:71:c6:f3:12:
                    e9:41:a6:6c:c2:ba:49:d7:4d:eb:e6:ff:c7:45:83:
                    fb:33:87:7a:0b:c5:5e:81:ba:80:fb:80:eb:24:dc:
                    80:05:ff:e7:ee:69:a6:4a:88:c2:46:7d:fe:2a:f6:
                    2a:28:34:11:2e:87:8a:2b:81:0d:f9:76:96:cc:d6:
                    5d:3e:88:f7:c8:b5:34:ba:89:0e:7c:39:69:cc:26:
                    1e:b4:c6:73:90:8e:67:93:e1:4b:b5:32:b4:e7:0e:
                    f1:19:f1:44:a6:72:b8:4d:e2:e3:e1:11:da:a0:e3:
                    8f:6d:b4:2f:3a:3d:4f:bb:ee:92:5f:0e:f2:ce:21:
                    16:81:89:e7:6e:35:dd:08:de:d6:61:d5:78:13:f6:
                    99:28:52:29:bd:93:e8:f7:93:25:ad:69:05:d3:6b:
                    3d:2b:42:e2:35:de:d3:81:61:5f:27:c4:37:e6:1c:
                    1a:5f:7a:79:c4:35:2e:30:7b:c3:c7:a7:bf:43:b3:
                    ed:ec:36:2c:56:d8:5a:de:db:0f:0a:96:d5:77:80:
                    64:0c:f8:50:12:ac:8d:61:be:23:04:9c:ec:14:1b:
                    f5:bb:b9:9c:52:1f:e6:c5:2e:10:1f:5c:7f:2c:09:
                    a3:37:57:5a:f5:6a:e5:75:f1:dc:17:6c:4a:0b:8d:
                    d6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:DE:19:80:FC:02:73:2C:A8:E6:B5:89:74:94:E9:40:BC:2E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/c613dbda-5651-3c37-81fb-c52ffa77a2ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.160.0-198.89.185.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:32:07:bf:7f:91:ee:77:f3:20:b3:0c:1d:d0:27:d5:80:
         f7:5b:12:a0:a4:74:a6:82:48:ca:51:87:b5:51:42:b2:d9:5c:
         8f:66:4b:5f:e7:a1:fa:8c:79:0b:2b:88:43:71:1a:b3:2f:3a:
         97:38:e5:cd:bd:93:b3:63:05:8b:f4:08:25:8f:76:d9:16:b3:
         a9:06:9a:6d:d4:4e:51:9e:ef:b8:27:02:9c:25:a1:0e:f2:06:
         b0:31:3d:09:c0:15:ce:23:4b:3b:83:85:a9:db:d6:6e:4d:f5:
         ea:f9:d1:1d:c3:ec:91:f2:02:9f:f0:1e:3c:ce:59:d4:ad:da:
         49:2b:f6:3f:b8:f6:ac:ca:75:60:9e:c6:ac:ff:ae:e0:66:2e:
         38:52:70:3c:66:b4:72:02:7c:48:35:9f:71:2e:73:14:6a:7d:
         36:e5:26:f6:14:38:81:f9:1e:48:4b:08:3a:9a:d6:70:02:2e:
         9f:a4:7c:8d:fd:72:ab:95:6d:17:08:ad:f9:12:4d:60:07:6e:
         08:9f:11:15:dd:95:b8:f0:18:3b:9a:a4:0e:51:46:9d:f6:6e:
         fd:d6:12:77:90:ac:ce:69:ef:86:3b:a2:1b:fc:1f:f9:95:37:
         96:9b:40:14:e5:8e:09:fe:53:8c:fc:7c:ee:b2:61:c5:bd:37:
         9a:17:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 09:21:02 2025 by rpki-client