Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ae5a78a5-f226-3313-9ee6-ea9354bd8fd4.roa
File:                     ae5a78a5-f226-3313-9ee6-ea9354bd8fd4.roa (raw, json)
Hash identifier:          EtUYByGf0q5fZKWk5j9HghcJs6ANUVIJ3JyJ2JKc1iI=
Subject key identifier:   05:9D:AE:FF:76:DD:5A:99:C4:0D:31:72:06:8E:6D:79:EF:E4:AA:D3
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A612B180681EC42AA0BADC400
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ae5a78a5-f226-3313-9ee6-ea9354bd8fd4.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     13768
IP address blocks:        65.39.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:18:06:81:ec:42:aa:0b:ad:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=6726e442-53a4-40cb-a921-476bcfa7d730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:54:3e:ae:0e:da:56:11:d9:78:22:48:b2:
                    64:14:20:b7:aa:21:67:ae:fe:d1:8f:b2:6d:7a:43:
                    d0:ab:cf:62:5f:9a:15:d3:35:8d:19:10:03:67:48:
                    7c:f8:39:83:9e:fd:7a:7d:fc:09:cd:19:be:8e:90:
                    5b:8a:aa:3b:4f:e9:3d:cd:0d:1e:9d:0e:ea:4c:60:
                    1d:75:7e:c2:1e:a3:81:19:bc:40:da:01:84:40:42:
                    96:1c:00:5c:fe:01:aa:f7:c1:c4:5e:b3:20:cf:76:
                    54:37:94:a7:96:a3:35:36:d8:b8:17:de:b5:9c:f6:
                    ab:0e:be:2f:76:ce:ea:54:a8:0e:ac:47:5b:29:78:
                    49:32:32:0e:04:c0:a4:3b:2c:30:f5:ab:e8:85:44:
                    25:7c:23:92:c8:f4:25:05:c2:33:2c:d7:e5:38:8f:
                    3f:0a:b7:92:02:d5:d6:58:0f:55:1b:56:68:04:cc:
                    e1:de:4a:1c:5c:d2:cf:12:b5:e6:af:a3:13:eb:5b:
                    80:14:5b:9e:6d:81:1f:45:95:8d:5c:2b:ea:76:5b:
                    d0:65:6b:ca:2a:c9:d0:dc:01:f8:31:4f:21:62:fd:
                    84:bd:06:fc:8c:59:54:87:7e:ac:30:e3:99:9a:15:
                    1a:74:90:72:0a:f2:96:28:ae:63:9f:bf:d0:21:4d:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:AE:FF:76:DD:5A:99:C4:0D:31:72:06:8E:6D:79:EF:E4:AA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ae5a78a5-f226-3313-9ee6-ea9354bd8fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:58:45:9b:75:52:67:93:2e:77:2b:54:ba:c1:66:16:a9:f5:
         06:81:4d:88:ac:43:47:91:c2:7d:04:f0:20:b7:dc:f5:35:9f:
         27:72:4d:30:3b:5a:dc:8c:77:27:0b:a4:7f:c4:14:a5:c2:ae:
         5e:21:5a:36:77:0b:c9:d2:a1:c3:33:90:aa:8b:c6:df:4d:41:
         31:42:a6:3c:54:d6:57:db:ff:e1:cf:28:54:cc:51:af:11:2c:
         98:b0:01:ce:59:2b:4c:bf:5a:88:96:e1:00:95:96:cc:4f:19:
         cc:35:bd:a7:ef:a8:83:be:3a:00:29:40:f8:98:0f:09:d1:b6:
         55:84:da:f8:09:29:2f:26:78:d6:5a:a0:b7:ae:33:bf:40:36:
         82:88:0d:06:24:aa:77:62:1f:74:2e:a0:19:14:2d:d3:57:b1:
         1b:4d:96:e1:05:9b:18:61:33:44:e1:f3:44:27:7d:9e:a3:82:
         d8:f1:c4:4c:1c:a4:a0:90:ac:65:5d:e4:86:0f:85:c9:af:d5:
         1f:fc:01:26:bc:88:41:03:04:27:4f:32:32:1b:6c:5b:8f:60:
         75:79:ab:1f:85:b6:97:8c:56:94:0c:b5:bf:4f:f8:ef:e3:0e:
         d9:08:b8:5c:b8:f3:e9:2b:42:bb:5c:37:5e:b8:c5:86:20:e7:
         24:db:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:45:52 2025 by rpki-client