Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4ae74bfd-22c0-385e-9ac6-3e98b63b561b.roa
File:                     4ae74bfd-22c0-385e-9ac6-3e98b63b561b.roa (raw, json)
Hash identifier:          zQOF2CmRrfVZ6TJG4NpzPLfUXP48pJfsi7dM9S9cVRw=
Subject key identifier:   11:D8:2D:B3:45:8D:19:B6:3B:B2:02:84:31:75:CB:87:CC:5B:C9:F9
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC51E4BD412D4C51E20680
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4ae74bfd-22c0-385e-9ac6-3e98b63b561b.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        64.226.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:51:e4:bd:41:2d:4c:51:e2:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=8ad86a1c-5614-4f77-87c5-4b262847af4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:48:74:55:5e:9e:ca:3a:cc:00:fe:7e:66:
                    ac:28:20:9c:0e:7a:3c:29:46:4d:4e:48:06:82:9f:
                    6c:3f:3e:da:b4:33:45:e4:d4:24:c1:6e:42:90:4c:
                    3c:13:7b:50:f8:b1:d6:c4:b4:25:8d:c8:91:6c:c5:
                    eb:04:d6:c8:fe:d6:5e:7d:1b:a3:75:a7:67:31:74:
                    12:cc:17:df:ce:d1:8b:67:01:ff:eb:15:6a:b3:db:
                    de:10:55:3c:4e:e9:51:d9:fb:3d:e1:40:aa:e4:3d:
                    f4:72:11:f9:bc:61:81:1d:00:ca:8a:2d:76:ba:39:
                    73:58:c8:40:dd:21:ea:30:f9:e5:43:84:d4:47:00:
                    d1:ef:a4:1a:f0:ad:02:1f:bb:da:63:40:f5:31:d5:
                    92:69:01:f5:2a:d6:15:b8:92:cd:31:13:d0:d8:19:
                    92:17:1e:25:e3:74:83:93:3b:b6:92:eb:04:1f:74:
                    34:f1:5f:42:a9:d3:c3:8b:d6:a1:ae:8c:c4:75:d1:
                    1d:63:33:74:6e:60:e6:bd:82:64:e1:1b:a1:d6:4d:
                    5a:28:21:da:d7:69:ef:85:1c:74:ff:5f:0d:2e:73:
                    fa:7b:b5:46:48:88:dc:37:58:c2:cd:c3:67:91:da:
                    42:af:f0:5e:32:d3:da:12:07:07:2a:e7:f3:c6:ad:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:2D:B3:45:8D:19:B6:3B:B2:02:84:31:75:CB:87:CC:5B:C9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4ae74bfd-22c0-385e-9ac6-3e98b63b561b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:59:44:f8:62:11:59:2f:35:1f:c3:0d:15:96:96:36:02:
         c2:56:5f:9a:d1:a2:27:1a:3a:a0:17:46:1c:5a:69:a5:2b:d5:
         af:24:33:a9:b7:99:9a:1b:f3:b7:f0:43:2e:f4:27:8c:43:a6:
         e3:33:39:ca:2c:e4:64:24:d3:66:bd:2c:f6:e5:e8:1a:82:3c:
         49:28:a0:b4:e9:e6:cf:13:5f:f1:bc:53:6b:b4:16:0f:6a:6d:
         47:4b:ca:de:82:e8:9e:12:db:fe:83:dd:84:1e:d8:e6:3f:af:
         b5:4a:83:1c:79:aa:0e:de:ee:27:bb:fa:eb:ef:0a:b4:f6:dd:
         a8:60:99:5f:40:5f:5d:4c:19:bf:f0:32:9a:e9:8b:82:43:fb:
         4e:d4:8b:f3:6d:be:15:f1:0a:79:c7:c8:4b:14:09:01:c2:db:
         93:27:73:cb:f6:17:1b:e5:b7:79:88:c6:fc:e1:2f:01:64:f2:
         31:60:57:3a:4a:cd:bb:c6:7d:47:b3:e3:43:a3:33:8e:31:10:
         d0:f4:f8:94:a1:03:57:11:47:6e:52:a0:2f:96:3a:8e:dd:cb:
         01:24:7e:96:9b:94:c4:c9:bf:e1:4a:db:69:b6:2f:f6:17:03:
         69:e2:43:ff:14:eb:dd:92:bb:01:bb:48:b7:08:e4:2e:95:68:
         b1:c5:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:39:10 2025 by rpki-client