Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4622d927-0567-38f8-bee0-a0da9c7bc306.roa
File:                     4622d927-0567-38f8-bee0-a0da9c7bc306.roa (raw, json)
Hash identifier:          Bm1GXm3Ikj5bd0DWlCizN8bdCwaQ99CWiCARdiXDXaY=
Subject key identifier:   64:FB:86:4F:33:7B:2A:CA:62:61:2C:E1:6F:71:10:70:E5:E1:41:2C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B5C6C766F5BAAED8A394E7D80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4622d927-0567-38f8-bee0-a0da9c7bc306.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     174
IP address blocks:        173.213.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:76:6f:5b:aa:ed:8a:39:4e:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=20dd54be-e322-4623-8761-0cc679065763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:04:27:d1:d2:1c:08:41:9d:11:f7:e4:b1:
                    37:8e:bc:cf:f3:12:18:e1:12:df:18:ba:64:48:4b:
                    96:ce:f2:51:5a:4f:1a:94:0d:7b:15:ab:ec:dc:3f:
                    3d:d7:db:3d:a7:bf:53:4d:cf:58:f2:a7:86:91:86:
                    85:ba:54:b3:a6:27:f4:69:6d:64:9a:6e:eb:50:d8:
                    7b:44:da:bb:31:de:e6:68:b3:05:b1:28:18:c1:74:
                    e1:34:d4:90:b2:64:ea:c4:b1:4c:fd:49:fa:56:ef:
                    ab:7f:77:21:8e:e7:87:05:90:5c:fe:bb:2d:d5:26:
                    f7:c1:58:d5:53:43:9b:17:0c:34:fc:9e:6b:cd:d2:
                    c1:fc:db:d6:e9:71:76:fa:03:b2:85:91:c4:32:a8:
                    bd:90:43:07:43:97:6c:f7:3d:74:0f:e9:88:fc:1b:
                    97:93:15:62:ee:6a:df:67:ac:9f:6e:fa:64:df:cc:
                    b5:d5:86:49:8e:b7:78:3c:91:4a:de:2c:43:87:b5:
                    21:d6:ac:03:6f:f8:90:0f:98:e4:3f:f5:9e:df:18:
                    9e:e1:d7:af:a5:d1:37:ad:8f:56:b6:9e:7d:75:11:
                    eb:d6:c4:75:fe:63:49:3e:0f:92:58:af:e6:0d:46:
                    cd:d6:fb:76:a7:19:fa:b4:46:92:d8:70:e8:93:90:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FB:86:4F:33:7B:2A:CA:62:61:2C:E1:6F:71:10:70:E5:E1:41:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4622d927-0567-38f8-bee0-a0da9c7bc306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:87:0e:aa:33:e0:39:e4:8e:15:25:30:5d:83:28:43:83:d5:
         6d:11:9d:f7:4f:3c:22:ac:0b:29:b8:f6:ae:38:63:a0:b8:49:
         69:94:93:f7:7f:e2:51:e2:92:89:46:44:c8:98:ad:8e:bf:68:
         2f:3a:79:8b:c9:e2:3c:1d:e7:9f:46:da:e3:e3:79:40:09:4d:
         01:58:43:09:cf:ae:3f:11:46:1d:39:77:9c:ea:67:68:a6:99:
         ac:b4:59:24:be:82:f4:85:a4:5b:7f:97:4a:26:ef:f2:eb:57:
         80:64:c9:23:76:14:e1:f9:77:08:0e:fd:d6:91:1f:91:2d:55:
         ba:72:d9:21:f9:5a:a8:8d:e7:e0:1f:9c:17:f7:88:de:5c:e6:
         0e:57:74:c6:1a:43:44:6d:3d:45:1a:f8:15:45:e9:27:f5:3f:
         04:ed:56:1e:d7:21:88:0c:83:9f:b4:09:93:e9:4b:b4:5a:10:
         8b:1c:cc:d6:60:fb:88:d3:8e:3d:f4:3f:70:ed:c0:d8:78:da:
         94:ff:cd:22:4e:7f:11:36:5a:b3:cf:cf:32:bf:ee:29:26:27:
         95:75:d6:cd:12:38:48:79:06:97:09:0c:bc:47:09:4e:50:27:
         02:1c:fa:97:0b:12:20:29:1b:c9:dc:20:67:95:40:45:78:93:
         e4:71:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:39:31 2025 by rpki-client