Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa
File:                     8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa (raw, json)
Hash identifier:          BEJQlp5HyLsKH6y/1xNlkVt3NiqmwkgWk2w4aEYmlAg=
Subject key identifier:   D3:1B:01:8B:63:FE:F4:9E:EB:37:F8:3E:F4:74:25:FB:98:96:EF:52
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F3E6455213A53A7C3EEC
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f3:e6:45:52:13:a5:3a:7c:3e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=6aedc682-3c58-4d7d-888b-4490842da7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:ee:72:d3:97:8f:b3:12:98:26:43:21:b3:
                    7d:12:03:41:a1:08:a5:46:af:2a:ad:d3:eb:e8:79:
                    d5:b2:29:c1:ab:77:ef:67:83:9b:91:1d:19:6a:4d:
                    24:7a:86:34:55:79:11:36:39:ca:a9:34:40:a2:b6:
                    90:44:5f:cd:60:4d:10:44:a5:46:7f:e5:b0:47:ed:
                    b3:dc:0b:32:e4:8f:11:35:77:63:44:49:9d:37:ee:
                    2c:7a:4a:91:79:8a:ef:b8:48:c1:70:6d:93:28:5b:
                    54:ba:d3:04:18:1e:83:04:f7:e1:98:fa:67:44:45:
                    d1:aa:7a:fc:59:0c:66:7b:b7:f4:eb:73:91:7e:d8:
                    af:59:2c:81:a4:70:ea:9a:14:14:c4:b7:4b:87:2c:
                    11:7a:34:32:62:32:ca:46:7e:4e:04:42:32:08:01:
                    7f:73:e9:42:e2:73:a2:d8:d9:69:a3:32:71:99:f3:
                    96:40:2d:13:9f:bf:b1:5b:47:04:10:97:89:ff:f1:
                    b2:15:3b:64:19:2f:81:cc:b5:a3:f2:bd:a2:d7:ed:
                    ff:e5:42:5e:1e:a1:64:47:bf:16:29:33:e9:ec:33:
                    30:9f:4f:d1:8d:57:a0:44:fe:27:8c:2a:28:e6:17:
                    f8:7e:f4:70:27:0d:25:14:8d:7b:1f:b6:9c:fe:1f:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1B:01:8B:63:FE:F4:9E:EB:37:F8:3E:F4:74:25:FB:98:96:EF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:28:fc:95:f4:73:43:2d:e8:64:ae:c2:e4:f1:c2:6c:df:7e:
         0e:53:6a:0b:f6:bb:20:8b:4e:6e:56:2f:86:0e:28:f4:db:ed:
         43:7d:c1:c6:73:f1:c7:bf:54:70:cc:30:2e:3a:8f:b5:f2:00:
         d6:b9:3b:f2:dd:91:03:5c:55:1d:5f:7a:06:6a:e8:eb:99:61:
         8e:71:d0:50:5a:95:e2:67:0f:d6:09:4d:4c:c2:77:c5:4d:75:
         19:5d:f9:b8:45:d1:3a:dd:7c:41:9f:51:bf:05:cd:a1:54:88:
         b8:3a:9b:b5:0e:e5:73:60:bf:91:12:eb:73:06:fe:3c:bb:22:
         85:31:75:20:de:d1:b3:bc:46:9f:eb:26:96:99:16:3b:2c:7c:
         ac:88:a1:1f:1d:29:b8:0e:3e:4f:94:49:33:66:3b:bc:1b:57:
         bb:a8:40:bc:71:2f:ec:14:2f:83:25:22:c3:1e:c7:ea:99:dd:
         ea:57:c7:3a:b0:57:bd:00:a5:a0:88:50:9a:5d:fe:dc:3d:04:
         93:74:71:73:b2:6e:82:0b:5d:02:88:9f:50:08:01:6d:6e:97:
         59:fd:1d:8b:e1:2d:00:03:2d:0f:16:5c:59:7f:ca:6d:43:9d:
         30:fb:f3:37:6a:15:26:46:fe:7f:cd:5d:78:55:4f:4e:00:4b:
         d2:0e:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:14 2025 by rpki-client