Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/037ce711-17cb-3655-bfe6-f303acd00264.roa
File:                     037ce711-17cb-3655-bfe6-f303acd00264.roa (raw, json)
Hash identifier:          gdyG974ehTGlG73a/QfoPow/6iGS8kLk/jCnkMOdnN4=
Subject key identifier:   4F:62:E7:32:EC:8E:87:74:F9:B4:30:C5:3E:64:36:A6:AD:F9:84:A9
Certificate issuer:       /CN=04ea0880-2156-4bff-9635-feb716ac6fae
Certificate serial:       010D0C9F4328584B13D6BF6D0766006D36735F00
Authority key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/037ce711-17cb-3655-bfe6-f303acd00264.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     906
IP address blocks:        170.39.22.0/24 maxlen: 24
                          2602:fd45::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bf:6d:07:66:00:6d:36:73:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ea0880-2156-4bff-9635-feb716ac6fae
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=7dc4d20d-eab2-4980-9587-06afb3e1c792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:dd:f8:c2:69:e2:97:0c:7b:7e:c1:54:7c:
                    f1:ad:bc:c9:0b:3e:38:11:a7:9e:b7:64:0d:ed:e4:
                    16:ff:23:9c:02:14:2b:96:71:5f:00:be:66:86:f0:
                    2b:b4:aa:c1:82:f6:4a:bf:77:89:eb:b2:04:40:60:
                    e4:88:7b:36:00:54:c1:42:08:98:9f:f8:20:23:2b:
                    54:fb:7a:a1:f8:75:b5:d5:d6:f9:f8:1c:20:0c:ac:
                    8f:5d:35:9a:ce:5e:24:3a:d4:29:cf:83:5a:09:b7:
                    06:a9:33:cd:17:e9:98:64:48:81:ad:63:ff:90:1a:
                    d0:ef:e0:f0:d8:df:3c:46:ed:21:d9:a5:f1:5c:a2:
                    7c:b3:f7:f1:db:da:43:2b:93:76:db:62:79:af:4f:
                    e8:1e:26:88:56:b0:71:a4:e3:0d:83:17:67:d3:f3:
                    2d:9b:69:44:df:4c:6b:d8:c1:01:c6:5f:45:e2:99:
                    13:3a:a2:d9:71:7f:5f:0c:98:e1:47:04:5e:56:c7:
                    e1:a9:db:c3:b8:da:c0:f8:b7:c2:01:4c:86:d2:64:
                    fa:be:38:3e:c4:75:da:9c:1f:4b:0a:c5:b6:f2:8c:
                    14:6b:2b:cd:01:bd:57:a4:23:b8:b6:c8:55:37:fa:
                    5a:e7:ac:0b:75:a3:ec:60:cd:c7:bf:6a:1a:80:49:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:62:E7:32:EC:8E:87:74:F9:B4:30:C5:3E:64:36:A6:AD:F9:84:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/037ce711-17cb-3655-bfe6-f303acd00264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl

            X509v3 Authority Key Identifier:
                keyid:6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.22.0/24
                IPv6:
                  2602:fd45::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:52:89:0e:c6:79:1a:67:05:d0:2f:a2:fc:ed:76:04:5c:
         4a:3b:42:13:8d:87:52:d6:1f:8e:c3:73:ec:75:8d:18:e4:e5:
         ac:5b:35:47:c3:ca:90:1b:0f:b1:fe:28:50:f5:bc:71:0c:96:
         fe:b2:36:5a:05:a6:4c:4b:ab:cf:c8:fa:58:1c:62:40:95:42:
         6b:7f:98:98:bf:93:ac:f5:cd:91:e7:bd:4e:42:1b:61:21:96:
         c1:55:00:c5:e1:61:db:2a:ff:bd:8d:9e:25:45:e5:d8:ba:17:
         67:92:c2:a0:6c:07:39:e4:78:36:2f:9d:60:8a:eb:1e:b3:0b:
         6b:4a:08:34:9b:66:24:86:2e:75:cb:1a:05:d6:b2:9b:06:68:
         b5:d4:a8:3d:2d:f8:dc:9c:e0:67:b3:85:46:20:67:62:a4:9e:
         c2:bf:fe:fd:ca:98:b9:2b:82:a9:42:39:fa:3b:96:a2:06:e6:
         6a:21:7e:15:fe:8c:29:ab:62:f7:be:67:05:39:0e:60:09:c9:
         1f:3f:45:a7:79:8f:4e:a9:4e:a9:bf:e5:d7:77:e1:eb:8b:a0:
         91:fc:ae:a7:89:ec:be:fa:c1:38:60:06:8d:40:a4:c3:08:0f:
         ce:68:31:af:c3:3b:46:69:ab:77:1b:ae:e8:d3:54:7c:8b:76:
         e7:be:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:14:23 2025 by rpki-client