Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/00c36b62-ecde-3ffb-ba11-43de42456004.roa
File:                     00c36b62-ecde-3ffb-ba11-43de42456004.roa (raw, json)
Hash identifier:          F47XoPLSzg4MbmMyfor6D73T+tlOHpNv0tR+Iz/zLVQ=
Subject key identifier:   20:B4:F2:F4:2D:01:17:24:A8:B4:FC:0B:11:C5:04:21:20:C8:80:6A
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0ED493AB2F0B273F4B80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/00c36b62-ecde-3ffb-ba11-43de42456004.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        192.34.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0e:d4:93:ab:2f:0b:27:3f:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=dfba3382-93bf-4802-a2ee-c3943f9d4df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:a4:93:8e:3d:40:da:a5:b9:6a:f1:09:ae:
                    a6:d0:53:a8:92:d6:c3:bd:82:aa:1b:4d:05:ef:32:
                    ae:70:75:77:c8:ea:79:14:76:8d:5a:f9:71:73:b2:
                    a7:46:d1:a2:ab:f5:9e:e5:f5:dd:f1:bb:81:b0:46:
                    ac:75:19:b6:c0:1a:17:81:df:fd:b6:b6:70:0a:4a:
                    49:64:6c:38:72:9b:ff:62:0a:2d:ea:3b:f4:33:95:
                    11:49:4d:07:ed:18:9c:77:92:d0:cb:b8:94:b8:6b:
                    a2:c5:8e:7d:41:c8:5c:2d:46:97:39:dd:59:4c:df:
                    9c:1c:a5:54:39:be:70:31:cb:52:33:a0:53:0f:56:
                    43:e3:bf:71:9f:ac:57:85:ae:7f:83:a1:2d:3c:11:
                    3c:3f:17:37:1e:f9:c3:11:64:6d:6f:a9:aa:8a:61:
                    3e:8b:88:68:6c:3e:87:b9:bf:26:56:59:42:b3:18:
                    0a:43:c0:84:ab:b5:4b:91:10:41:0b:fa:45:68:42:
                    d3:87:83:d6:47:d0:6e:d0:c8:e7:4b:67:89:0d:63:
                    a5:3d:8a:50:34:fe:65:ed:5a:05:c1:b2:f4:80:a9:
                    2e:31:be:9a:eb:26:c9:a8:3c:bd:22:08:8f:b0:96:
                    33:2c:e6:0f:56:8a:88:9f:17:08:6f:48:5c:7f:27:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:F2:F4:2D:01:17:24:A8:B4:FC:0B:11:C5:04:21:20:C8:80:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/00c36b62-ecde-3ffb-ba11-43de42456004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:28:9e:6c:f9:1d:c5:20:65:d8:b2:4a:80:42:09:98:20:6c:
         f9:b6:3f:97:35:70:99:cb:ca:dd:3a:68:46:63:d1:d0:64:84:
         78:4f:de:94:c8:94:cc:02:ae:76:13:54:ae:32:99:4b:fe:a3:
         c4:33:50:00:e8:74:34:e4:c7:ab:3e:87:50:b5:ab:c3:2b:c4:
         58:f1:ac:a2:55:fb:74:47:41:66:09:74:56:73:a6:ea:49:f6:
         a0:43:d0:d7:39:df:4c:cd:47:3c:99:8e:88:e5:5a:bb:55:57:
         ea:f1:56:ec:08:b7:d7:79:98:50:54:cb:88:b7:42:46:40:1c:
         75:f7:16:c2:98:1a:0a:29:d4:30:b2:53:c3:48:a5:64:7a:f4:
         8c:30:1d:a0:c6:f1:53:dc:e9:b8:0e:c1:6b:9e:f3:79:52:88:
         77:08:77:36:6f:e3:0e:9e:c2:b8:b2:10:4b:21:96:82:93:2a:
         cc:fe:c3:55:61:5d:87:db:09:5f:a1:33:76:9d:44:7d:9b:a7:
         0d:2f:5e:98:56:13:df:b5:49:67:a5:4c:ed:d3:f3:d6:3b:1c:
         0f:5e:c4:f9:f5:16:33:91:6f:5c:7a:71:ce:d1:ed:1d:37:57:
         5a:26:ce:f1:9c:cd:1e:e9:0f:71:df:2a:67:09:2d:fa:cf:5e:
         9c:14:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:57 2025 by rpki-client