Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa
File:                     df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa (raw, json)
Hash identifier:          E4dAgMYShhABcWyDgyfcIj2QUjOGsGFcT5+kO4GCt/4=
Subject key identifier:   64:78:9B:3A:89:50:75:59:EE:71:9C:35:17:4A:22:17:68:F3:EB:7B
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0EBF6E0F58A85BA6D380
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        184.170.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0e:bf:6e:0f:58:a8:5b:a6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=91cf8749-f23a-4914-81f7-22c47e7d7eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:4e:bc:16:0d:4b:70:09:fc:58:75:59:3f:
                    9b:92:4c:b9:0a:29:61:04:aa:70:e5:36:80:01:45:
                    f7:8e:2a:78:c2:d1:0b:53:3a:e7:8d:fd:4c:da:f9:
                    3e:37:24:46:f9:2d:44:40:c4:6b:93:fd:2c:8d:e3:
                    c0:eb:e8:b7:36:69:29:52:45:e5:ab:a3:68:6f:37:
                    5d:ae:51:1c:ec:ca:b7:04:f7:0e:6f:bc:f4:a1:7d:
                    ac:20:8b:42:21:d8:ac:6d:f0:74:0a:42:80:a7:24:
                    3e:ef:f6:62:51:54:d0:3c:7d:e4:18:a9:70:c3:be:
                    09:cb:5c:56:4b:01:1d:fd:73:ee:19:0c:d9:85:2b:
                    84:1c:b9:76:bf:65:e8:6e:2f:3f:b1:b4:af:11:8a:
                    a9:75:b0:74:2f:6b:98:1f:18:c8:b9:7b:78:40:8c:
                    41:5f:b2:6e:d1:98:12:f0:87:a9:66:78:6e:e0:7b:
                    be:55:4c:fe:08:ee:3e:7b:46:48:a7:f3:b1:52:89:
                    87:76:9d:d6:3d:2e:e5:4b:d7:c8:81:b9:b6:1b:53:
                    14:cc:94:0a:e6:95:2a:5c:21:3d:d5:ec:03:94:01:
                    08:c4:ef:ad:36:aa:b2:10:d1:9f:eb:08:55:1f:4b:
                    fe:0c:c6:74:56:c1:f5:19:3e:7e:a8:b2:15:2c:5a:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:9B:3A:89:50:75:59:EE:71:9C:35:17:4A:22:17:68:F3:EB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:80:54:8b:0b:e6:dc:62:1f:f5:c7:f2:d7:cd:ee:b3:55:
         0e:32:b5:36:a6:0a:c5:47:a8:80:5e:5f:28:cc:b1:b3:a4:bf:
         ec:c1:a3:da:a7:19:c4:44:e8:47:63:a9:bc:cb:8b:47:ab:63:
         22:24:3b:f6:15:f1:cc:d4:69:54:a0:55:55:48:6b:99:f9:2d:
         08:82:6e:56:38:e7:1e:1d:e4:4f:27:4f:b3:47:9c:55:eb:47:
         9c:db:eb:1e:90:d9:d3:43:36:be:9c:88:0d:8e:9f:30:46:bf:
         d2:eb:3b:23:99:7f:24:10:2f:24:2d:5a:c6:31:07:c0:2c:52:
         16:b7:61:16:49:a3:d1:d1:0d:81:42:d5:90:4f:50:f5:6b:12:
         63:61:40:87:80:44:55:df:e1:b8:7d:f0:20:32:4d:c7:b7:68:
         98:88:39:c4:1b:43:e3:81:42:48:76:99:af:65:6c:32:a0:32:
         0b:a7:06:9a:5b:5f:d3:b7:ab:9d:78:9d:ef:14:ee:3d:d5:8c:
         97:f8:a8:0d:a7:ab:91:59:9e:50:0d:a5:56:08:8b:e2:63:41:
         c8:5e:51:68:48:30:1d:ed:42:04:64:9b:69:68:4b:69:01:35:
         56:e1:12:36:e7:ee:e4:84:c2:bc:ac:27:fc:cc:cf:cd:f5:ff:
         f1:3e:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:14 2025 by rpki-client