Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
File:                     4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa (raw, json)
Hash identifier:          oKdG28RronDTovDvFWpZOdFkonQzPlOIFaFdXyANYC8=
Subject key identifier:   66:64:5D:8B:90:1D:62:A0:76:2C:E4:DE:DC:FA:BA:BD:38:B7:FC:E6
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584B1F016C289D47A7C48F6D20E0
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     44486
IP address blocks:        134.65.192.0/22 maxlen: 22
                          164.152.160.0/22 maxlen: 22
                          169.155.44.0/22 maxlen: 22
                          169.155.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6c:28:9d:47:a7:c4:8f:6d:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=9888c476-55d9-485d-9f49-4429fd9d9774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:b9:c6:89:98:24:1f:09:86:9b:30:cd:60:
                    a6:cc:dc:0d:af:a8:ca:82:c3:48:b8:41:9e:90:a1:
                    c9:ba:21:b5:ba:60:58:00:1a:9b:d2:1e:4f:5f:1e:
                    1c:2c:08:b9:20:c4:70:73:e9:9a:f5:88:74:4b:e8:
                    33:08:54:cb:32:91:80:5a:aa:2b:e9:14:cd:0f:7c:
                    da:1c:28:09:57:ec:6e:10:a6:0b:d4:0f:72:e8:b8:
                    be:1a:4d:80:a4:85:c7:a8:b6:ea:c3:d5:b0:74:40:
                    fa:10:87:25:b3:7d:83:69:40:da:9c:6a:3b:eb:65:
                    63:b8:da:76:a7:4c:ad:5e:2a:bb:86:98:b1:f9:0f:
                    72:a2:e1:2d:40:ee:4f:48:6a:0f:b9:b6:f0:78:6c:
                    a8:31:19:60:8b:5e:bf:0c:14:88:0a:0b:a2:5e:79:
                    0f:26:87:0a:0c:10:de:b7:6a:0a:b4:df:28:6b:bf:
                    a2:c3:8e:57:b0:c5:5f:51:f4:d9:90:dd:af:c9:ec:
                    43:60:3a:c7:14:1c:f1:5d:ba:a5:26:fb:f6:98:12:
                    2c:30:60:b3:88:ed:c5:02:c9:82:6d:1e:08:05:a9:
                    df:54:29:2a:6c:aa:f5:4a:d2:9d:f6:1a:64:7a:37:
                    e5:70:3b:ff:7e:ed:4d:4f:db:58:b9:0b:a6:8a:9a:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:64:5D:8B:90:1D:62:A0:76:2C:E4:DE:DC:FA:BA:BD:38:B7:FC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/22
                  164.152.160.0/22
                  169.155.44.0/22
                  169.155.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:7c:4a:03:9d:dd:75:fd:88:18:da:42:69:bd:57:95:fd:fb:
         8e:10:04:dc:c9:c7:8a:1a:d7:75:68:20:2f:a3:bb:98:da:66:
         91:96:da:09:57:ba:3d:ee:8e:0b:fa:23:df:d9:30:0b:68:9f:
         a0:f4:07:31:0a:3f:62:46:d4:6c:85:3e:53:c6:07:02:f8:0a:
         3c:6c:fa:a2:55:b1:72:1d:75:da:61:58:93:d1:09:fe:d8:2e:
         45:14:1d:85:70:ab:cf:0f:9e:f8:6b:6d:e6:28:f2:ab:29:d5:
         4c:c0:da:68:8f:9d:d5:0c:0b:c6:32:37:7a:79:e3:cf:4c:44:
         7a:3e:2e:3a:65:d2:37:58:43:37:44:fd:f7:d8:81:37:7d:2a:
         81:f8:1a:d2:82:9a:4e:41:d6:c1:bc:39:61:4b:41:9b:72:90:
         69:56:48:70:2f:d7:b8:21:c8:f6:db:5d:30:0c:6a:1c:fe:72:
         78:7a:50:a8:c1:95:1f:5d:0d:e8:9d:83:bd:03:38:e5:0e:af:
         51:da:47:f5:fe:35:5d:66:5b:5f:5b:cf:09:67:a2:86:df:42:
         1b:ee:32:5e:ba:13:0e:ef:3e:c7:31:15:ef:b8:1c:87:56:b7:
         da:34:df:2e:11:0d:7c:22:7e:36:68:fb:50:63:bf:3d:f7:fc:
         70:4f:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 02:20:28 2025 by rpki-client