Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa34e75c-092f-3aac-b049-a7b247568af9.roa
File:                     aa34e75c-092f-3aac-b049-a7b247568af9.roa (raw, json)
Hash identifier:          g4/wnMMDBbX3NrRisthoM369RT1S7wOvwXjtfqlvyUY=
Subject key identifier:   6D:65:84:98:F7:18:76:26:E1:74:AF:EB:3E:93:B8:A5:C9:D8:2F:42
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F38CD43ADC2C2DE582C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa34e75c-092f-3aac-b049-a7b247568af9.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f3:8c:d4:3a:dc:2c:2d:e5:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=755c6e02-4fa0-45e4-9f17-26017e194cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:3b:1b:ad:51:99:13:d5:66:b1:d9:8c:37:
                    5e:c5:fc:99:0c:93:ef:50:4a:95:2b:2c:53:68:e9:
                    5c:67:0a:67:92:72:92:5f:dd:8d:42:c4:d2:72:ac:
                    c1:0f:1c:21:f4:8e:97:49:d5:2d:50:76:a3:ef:eb:
                    f0:9b:4c:1d:1b:c8:8f:dd:5a:fa:31:6e:58:62:2a:
                    f9:92:12:32:0a:6d:4b:e7:a1:ad:a8:88:31:0f:1b:
                    1e:45:cd:eb:d8:db:44:3f:0a:f3:78:81:90:fa:92:
                    13:95:ce:e8:d3:53:25:c8:fe:87:28:10:88:34:03:
                    60:23:31:68:25:3d:9a:3d:be:b2:a3:37:02:61:b4:
                    b3:07:f1:d5:28:46:94:90:77:9f:2b:00:ac:e9:f4:
                    01:0b:bd:e6:c7:46:2d:18:f9:31:93:25:db:04:48:
                    db:da:19:13:0f:0e:8e:7b:ba:10:00:11:b4:47:30:
                    bd:94:52:49:18:e3:be:2f:64:82:a1:a3:a1:6b:c8:
                    3f:e5:8e:6e:4e:0c:1f:50:51:29:23:04:0e:ab:30:
                    df:ad:d9:a5:01:a9:74:6e:00:62:5e:c9:fd:22:2e:
                    f3:c6:58:e5:62:29:e5:d6:1b:0a:3e:4b:c2:f1:73:
                    05:ac:94:8b:89:3f:86:74:18:c1:dc:0a:06:42:64:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:65:84:98:F7:18:76:26:E1:74:AF:EB:3E:93:B8:A5:C9:D8:2F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa34e75c-092f-3aac-b049-a7b247568af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:e1:3a:23:a3:71:ed:93:74:f6:5e:71:c9:da:d9:75:34:
         37:ba:15:fd:05:18:c4:a9:aa:a3:76:e0:56:3e:72:54:68:e8:
         f2:9c:b0:f8:d0:38:05:52:a2:99:87:51:69:f0:d9:99:0e:ee:
         31:87:78:38:e2:59:9c:f4:e7:a5:bb:f2:fc:68:a8:02:3f:14:
         9d:c4:ed:5d:80:a0:5c:4a:07:0f:b2:68:0b:6c:13:aa:b7:1f:
         ab:a8:0f:f7:42:71:96:9d:ff:ba:3f:08:0e:67:d2:85:a6:1d:
         47:aa:ee:61:18:03:30:ba:b4:53:0f:58:d9:ae:84:30:bd:3c:
         fd:23:f7:59:78:f8:a2:70:dc:ec:52:ba:89:88:cf:32:2d:72:
         ac:c6:d4:4f:8b:09:8a:72:24:9c:f8:ab:e1:af:c5:d0:8c:af:
         f1:99:f8:5b:f7:a0:c7:bd:ab:8c:bc:6f:e0:60:91:a5:e5:01:
         ca:3d:c7:e8:4b:4f:dc:5b:d3:78:a1:a2:3c:12:8b:1e:8b:e0:
         5e:b4:d6:96:bf:12:27:c0:c4:b3:a7:81:dd:19:49:e5:c1:1a:
         11:e5:4b:37:e7:cd:21:a3:24:b2:79:af:37:90:b4:37:dd:68:
         10:b7:0d:e0:da:51:6c:0d:98:a1:72:ef:ad:88:1b:aa:4e:28:
         aa:b6:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:27 2025 by rpki-client