Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa
File:                     7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa (raw, json)
Hash identifier:          0zNYJbvHukpssDJhzM9jRt/Ekoh7oiLl2ziJD0rmwMw=
Subject key identifier:   22:5A:20:6B:4F:7F:73:A2:38:BD:48:24:1C:0B:FE:50:35:E5:8D:42
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584B39870B9D702BBBC8DDFF4280
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        167.253.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0b:9d:70:2b:bb:c8:dd:ff:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=87964810-e8cf-4abf-b69b-7697bb0369e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:51:c4:e2:d9:d6:bd:65:69:23:04:f1:15:
                    d4:58:f3:4f:2f:b8:b7:c3:3a:17:3f:aa:e8:0d:bd:
                    2b:d4:17:33:34:99:df:c5:1c:fc:aa:35:f2:c8:cd:
                    12:e4:51:a4:65:04:cc:6b:60:3d:07:cb:00:33:4a:
                    86:d4:80:9f:4b:f4:09:bd:02:5d:d1:75:40:76:1b:
                    38:33:4b:f5:ce:67:6f:f0:b0:84:45:41:9a:e9:a3:
                    6b:98:4b:3e:7d:e5:8c:8a:0e:72:de:f7:fb:15:7d:
                    37:f5:0c:9c:fd:65:98:3a:f4:12:fd:05:92:5d:8a:
                    87:6f:2c:2b:05:80:dd:82:c5:09:f0:a5:d5:93:06:
                    43:4b:45:43:f3:55:ae:25:d6:3b:1f:2b:cd:27:7d:
                    fc:f8:bb:4b:a7:2a:11:06:1a:69:d0:61:53:36:9c:
                    21:d5:b9:08:27:ea:46:c4:89:80:b4:4b:c3:71:86:
                    9c:7b:80:72:1a:8e:5a:3b:65:97:69:f5:1f:06:a4:
                    ca:60:26:66:90:6b:4f:ae:b2:89:bf:8d:84:09:bf:
                    8a:ad:1a:79:bb:a7:5e:df:19:2c:a8:79:23:1f:8c:
                    f1:a2:98:aa:d4:f9:c0:8d:d4:85:ba:73:d5:c9:e3:
                    26:ba:6f:19:7a:1b:ea:37:3d:14:7c:1a:18:59:fd:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:20:6B:4F:7F:73:A2:38:BD:48:24:1C:0B:FE:50:35:E5:8D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:b2:b8:14:99:86:6c:27:9a:29:70:96:41:fb:d0:67:30:
         c9:4a:74:cd:8a:05:78:1a:3c:85:88:d1:a0:6a:20:92:d5:f8:
         bf:22:47:da:fd:f5:48:e7:24:69:51:04:61:6e:4b:d0:ce:5b:
         d4:55:3a:2d:c2:a9:9c:d6:40:a3:9f:92:6b:e0:12:a1:44:14:
         1b:d6:0b:87:a3:2b:d3:fd:d5:3b:b8:89:7b:07:23:9c:a5:dd:
         b6:b4:1f:3e:a7:c6:2e:e5:8f:70:5e:48:61:cf:df:ed:33:2a:
         49:5a:8e:78:11:e2:18:32:e4:91:8b:4b:8f:26:a6:be:fe:56:
         31:22:21:48:0a:e7:96:a3:ae:de:70:d4:59:85:0f:6c:15:5c:
         65:e5:33:58:a7:ce:71:d2:c6:29:8a:ae:89:ab:75:44:07:69:
         dd:94:69:d8:19:49:f3:13:44:3d:f4:38:bb:5f:cf:72:80:af:
         6a:1c:7f:f5:8d:f1:8d:dd:98:2a:c6:82:14:13:0d:77:b3:ac:
         42:be:6b:b2:02:b9:cb:84:80:03:04:d2:63:cb:90:68:dc:4a:
         13:51:f7:9a:c0:ff:df:82:d2:b2:a6:16:da:d7:8e:b6:b5:51:
         cf:a4:f1:71:5b:ef:17:7c:c0:ab:a1:63:0c:10:08:1b:e3:18:
         7f:2f:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:39:16 2025 by rpki-client