Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/b552d1a7-ed7a-313b-aec4-a49cfdc659b0.roa
File:                     b552d1a7-ed7a-313b-aec4-a49cfdc659b0.roa (raw, json)
Hash identifier:          IO4Fr9qBEgPJ+s69sxmfXHJqLDYNHFcruNjz8wbF0cs=
Subject key identifier:   0E:2D:4C:47:D2:8E:91:B3:25:0A:BA:7D:86:67:AF:F0:E8:96:81:EA
Certificate issuer:       /CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
Certificate serial:       010D0C9F4328584A68F708F1E2F9FD658E320B80
Authority key identifier: 02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/b552d1a7-ed7a-313b-aec4-a49cfdc659b0.roa
Signing time:             Fri 04 Jul 2025 20:02:35 +0000
ROA not before:           Fri 04 Jul 2025 20:02:35 +0000
ROA not after:            Thu 02 Oct 2025 20:02:35 +0000
asID:                     9304
IP address blocks:        64.72.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:f7:08:f1:e2:f9:fd:65:8e:32:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
        Validity
            Not Before: Jul  4 20:02:35 2025 GMT
            Not After : Oct  2 20:02:35 2025 GMT
        Subject: CN=b734379f-335f-4a1a-ae84-0f35094550b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:b6:94:4a:2d:d6:8d:f0:ea:23:aa:d4:03:
                    b5:8c:89:70:be:61:8e:c4:4b:74:1e:3e:7a:8e:e3:
                    d1:84:c6:59:8b:b1:af:ad:70:86:a5:28:e3:b7:d7:
                    e3:3c:7b:36:7a:1b:40:54:b6:e4:df:47:90:13:5f:
                    18:80:e3:69:cd:94:1c:08:22:e4:9b:4c:d2:36:f2:
                    46:9a:dd:d5:4d:80:8e:13:d1:93:c9:5d:47:2e:18:
                    d0:ea:02:27:00:51:76:20:8b:6c:d8:24:90:3e:19:
                    99:a6:54:24:1e:6d:b3:3e:23:b8:4a:64:50:35:6b:
                    93:12:f4:06:d4:ae:a1:ff:17:ce:9a:ad:1b:2e:ec:
                    92:b4:bb:96:2e:43:f4:84:48:e4:10:b5:01:a1:b2:
                    97:f1:02:ad:1c:b6:7c:28:51:28:ef:b5:29:0b:21:
                    b4:26:13:97:ff:e0:b2:63:6c:de:cf:8e:11:f0:97:
                    96:a1:7f:95:60:f4:41:eb:67:e9:39:ec:bf:de:8b:
                    fb:ed:93:3d:17:54:d7:1e:5d:62:51:c7:d9:05:e1:
                    47:98:ee:00:1f:74:8e:0d:a2:77:25:d5:06:e3:8b:
                    e5:74:80:0a:75:5f:7b:01:a9:48:a1:80:ad:f9:d0:
                    a7:b7:7b:8c:cb:a1:c9:88:06:38:7e:a1:38:2b:df:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:4C:47:D2:8E:91:B3:25:0A:BA:7D:86:67:AF:F0:E8:96:81:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/b552d1a7-ed7a-313b-aec4-a49cfdc659b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl

            X509v3 Authority Key Identifier:
                keyid:02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:29:26:b7:88:20:e8:71:b5:3f:d5:df:90:5c:c1:63:da:
         35:f2:57:4f:61:d1:16:c3:c8:79:c4:c3:dd:e7:65:43:ba:38:
         4e:71:de:6d:8e:15:89:81:85:cb:0e:e6:05:0e:fb:5a:68:a7:
         f4:b5:a1:d1:0d:6d:e8:56:e3:19:b5:ea:90:4e:89:91:90:e5:
         48:19:3b:eb:4a:7e:0a:13:e6:bd:a2:d2:4b:dd:56:dc:95:6b:
         62:b8:58:ba:bc:95:8e:ea:df:5b:db:06:5f:c9:51:52:33:78:
         d6:71:d5:3a:5f:5f:12:8d:4e:6a:9a:fe:92:07:f1:a9:18:6a:
         32:1b:30:ee:46:de:37:2b:0a:22:08:a5:22:55:eb:25:ee:6c:
         a3:34:1f:ea:9a:9b:8c:f8:9e:47:05:d9:c6:0a:cf:b6:9a:5b:
         12:4b:8b:ce:17:37:6b:9e:69:b6:ca:0d:cb:39:f2:69:72:db:
         d4:81:18:52:5f:65:75:2f:2b:80:56:10:9c:a3:ce:36:aa:95:
         99:bb:23:10:3a:92:d2:68:02:1d:8e:ea:5c:c2:5c:a8:d3:06:
         a3:af:5f:4f:7f:c7:76:47:7a:f6:3a:32:e2:bb:9b:f7:4f:d8:
         c8:59:61:16:ce:6a:f7:b5:5b:1d:e3:a5:c8:69:5f:24:4d:72:
         df:0d:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:53 2025 by rpki-client