Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e87f794c-ce25-3ed0-90aa-447126ded8f7.roa
File:                     e87f794c-ce25-3ed0-90aa-447126ded8f7.roa (raw, json)
Hash identifier:          B22uf0nQbmfM94qRTGZh6qrv7wZB4BS2ryIcu8ypQ1Q=
Subject key identifier:   95:F7:2D:E9:2A:46:D7:F4:88:C3:14:04:AE:AD:C0:F3:15:C1:F2:D7
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0D988C44246BCB174A80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e87f794c-ce25-3ed0-90aa-447126ded8f7.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        70.32.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0d:98:8c:44:24:6b:cb:17:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=f6804bff-8080-4d07-9d5d-b802c621d058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:30:a3:ef:28:6b:11:bd:3b:15:9d:2a:6d:12:
                    31:ec:4f:f8:6b:1a:32:3a:3c:e0:11:9a:99:df:90:
                    f5:08:33:66:b9:22:0e:cb:93:08:a3:d8:13:a5:6b:
                    26:71:9b:18:40:07:91:38:9f:97:94:29:01:1f:2a:
                    34:18:6b:77:f8:c6:1e:1b:67:ba:e0:2d:bb:49:1f:
                    77:80:14:d1:48:80:e6:6b:86:6f:02:e7:3b:8d:ea:
                    7e:c5:8b:fb:8d:ba:05:79:84:17:59:2e:b7:a4:da:
                    d5:73:ec:44:0e:f0:83:90:14:7d:bf:02:cd:39:2e:
                    e4:cf:fc:3f:fe:d5:7b:48:02:eb:19:5d:ff:45:3c:
                    7b:88:ee:42:13:6c:fe:c5:42:5f:2c:ca:2a:42:98:
                    83:7b:75:bb:a7:a5:a9:f9:dc:ae:f0:5f:4e:cc:ac:
                    95:07:b8:3c:f6:3b:fe:c5:93:a8:ac:4e:79:6b:b1:
                    3c:4c:8e:a8:3e:99:35:36:12:1f:63:2f:e6:99:de:
                    65:85:05:08:fa:ff:6d:8a:97:0d:23:46:cf:8c:2a:
                    fa:0c:7a:44:21:5e:f3:0d:2f:f3:50:fc:19:0c:b7:
                    a3:e1:8d:f3:45:b7:c1:13:40:7f:b8:67:ab:5d:25:
                    3e:2c:d5:0c:23:e0:7e:e6:a8:bf:28:14:82:47:fe:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F7:2D:E9:2A:46:D7:F4:88:C3:14:04:AE:AD:C0:F3:15:C1:F2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e87f794c-ce25-3ed0-90aa-447126ded8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:af:d2:60:a1:33:5e:7f:b1:db:81:b4:a3:38:0c:53:95:f3:
         02:31:84:57:98:82:c9:55:95:4f:df:c7:ab:a1:09:8a:b2:21:
         95:2d:05:20:8f:b9:ba:e0:7a:45:2c:92:71:cc:e9:df:46:91:
         cd:57:f6:6b:44:77:9b:ca:8a:73:e3:a7:7c:cb:e0:88:ef:7b:
         80:77:2d:e0:47:2d:14:cf:4e:4c:5d:cc:ce:77:f1:c7:11:f1:
         04:cb:73:6e:f6:bb:04:55:ab:3e:06:89:d8:d3:25:3a:ab:c2:
         f0:d3:92:e3:32:1b:2a:a5:fc:2f:f7:5e:9b:bf:a1:16:a9:74:
         4a:b0:75:c5:58:40:f2:8d:22:a0:af:2b:32:79:42:a3:5c:0e:
         97:52:f3:43:98:2b:fc:ed:58:c8:3a:0d:50:5f:87:80:f8:13:
         58:19:7b:63:a3:33:6b:fe:14:28:51:0c:f9:81:00:b6:98:ec:
         34:1e:84:60:43:3a:aa:61:0b:cd:05:31:e2:da:03:7a:26:2e:
         97:70:90:58:db:82:80:e7:ba:7e:cb:ce:69:7c:79:01:f3:4d:
         c8:11:7f:5c:96:7b:dc:b9:d8:59:1c:9d:80:6f:58:b2:7e:ef:
         6f:da:a0:9a:58:08:97:d4:23:e9:90:db:32:c4:87:ce:7d:0b:
         c8:18:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:51 2025 by rpki-client