Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
File:                     6704a8d1-6da5-334b-b43f-c6a6426940b7.roa (raw, json)
Hash identifier:          YbOfS3R3oPJ6m5UEwpAXgQ29RayiSLzs0C5bZnEPNRQ=
Subject key identifier:   BD:46:C7:4B:13:62:FF:63:B4:16:F4:39:71:56:43:61:41:E6:8A:D6
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584AFC1C10813D96EB951285F300
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13576
IP address blocks:        204.15.52.0/22 maxlen: 22
                          204.15.52.0/23 maxlen: 23
                          204.15.52.0/24 maxlen: 24
                          204.15.53.0/24 maxlen: 24
                          204.15.54.0/23 maxlen: 23
                          204.15.54.0/24 maxlen: 24
                          204.15.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:10:81:3d:96:eb:95:12:85:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=e9aeecb4-5f39-4359-9b4f-9333b5c3a66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:88:ee:af:82:d6:6b:d9:56:29:1c:2c:a4:
                    e0:bc:a6:e7:51:49:76:3b:cf:e6:b2:f0:30:81:12:
                    0b:98:f5:7b:25:f0:33:8d:bc:85:07:a2:dc:f2:cc:
                    45:7f:90:a2:a3:29:4e:40:2e:78:d8:e6:74:a7:b1:
                    ed:d9:27:f2:f3:cf:59:87:21:3f:89:19:a8:46:29:
                    ff:e6:4b:01:60:a2:41:d5:36:28:1d:96:c4:90:8b:
                    08:13:ee:ec:46:d8:f6:6d:cb:83:42:64:e7:c6:cd:
                    52:c9:bc:9b:14:70:0f:dd:fa:09:a6:ca:ac:47:06:
                    a1:ef:d9:6a:dd:50:65:f0:92:73:c5:6c:3d:d2:46:
                    5a:f2:ed:4f:07:75:89:a7:f8:25:25:78:ca:0a:c2:
                    fc:63:01:4f:21:11:89:32:55:81:a9:ae:38:85:cd:
                    8c:d8:83:97:89:d3:3f:75:4d:09:8f:f9:4f:32:ef:
                    c3:02:1e:6d:37:26:52:ea:28:47:1e:51:35:c9:dd:
                    ab:86:ec:e8:5e:60:ef:69:32:eb:c5:27:b5:d2:82:
                    cd:a6:5b:14:62:71:a0:8d:b6:5d:34:69:4c:5e:35:
                    01:34:db:ae:25:b3:12:a3:6f:67:3a:4e:ee:13:ca:
                    f9:93:07:6c:6a:c0:90:a1:e2:16:c9:33:22:3d:33:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:46:C7:4B:13:62:FF:63:B4:16:F4:39:71:56:43:61:41:E6:8A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:04:fd:ba:d5:95:5f:e7:6f:29:b2:fb:a4:aa:57:cf:fb:ad:
         5a:0a:e3:71:05:e8:c9:89:37:f0:b6:09:4d:31:9e:91:01:97:
         78:2b:0b:c5:b8:16:f8:fc:f1:2a:5c:4f:d0:e3:89:af:da:00:
         ee:73:d8:22:10:36:49:db:09:1d:31:06:48:17:22:3d:0c:ef:
         8c:f7:36:57:76:43:b7:20:a1:33:60:75:a0:d3:09:99:78:69:
         b9:6d:1d:9d:f3:ae:92:0c:87:95:8a:b2:e1:ce:a3:27:94:45:
         bb:eb:90:2c:d9:d5:f9:fd:0e:38:d0:7f:c2:29:eb:61:b6:47:
         da:99:2e:08:82:dd:3c:2c:03:1b:74:62:f2:7a:58:74:3e:16:
         90:22:6e:78:eb:28:23:8c:2e:e9:81:87:a6:0d:fd:b7:03:b5:
         cd:9e:8c:5f:f4:83:4d:b9:66:b9:fb:1f:bc:44:9e:89:18:2a:
         55:4f:7a:7a:4a:cb:93:0f:31:54:35:c7:5e:86:e2:03:1b:39:
         41:e0:bc:32:99:bd:33:1b:fd:2c:62:d8:9a:6e:4f:e1:c6:73:
         87:9a:76:d2:53:50:6d:6e:9c:fd:e0:89:4d:49:cf:f0:83:48:
         6e:6b:f1:9b:e1:8e:4e:30:cd:8d:56:e8:c9:cf:6f:26:d4:b2:
         74:82:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:12 2025 by rpki-client