Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa
File:                     07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa (raw, json)
Hash identifier:          0jBiXIKUkWjpJX3vEuglB5g4qZ66+UjeUuYtWbVGiZ4=
Subject key identifier:   2C:01:38:19:D6:54:70:E2:22:BF:69:11:49:AD:EC:14:64:39:3B:4C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AC0163F05C2AD3E86625F77B4
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     396982
IP address blocks:        165.85.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3f:05:c2:ad:3e:86:62:5f:77:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=85cc7102-5e56-46b0-9bd1-8ca92722cbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:04:90:f3:11:83:fe:1d:4c:9e:72:cd:3b:
                    8f:c5:77:c7:d8:35:9d:e2:5d:30:fc:2a:ea:8d:40:
                    9e:79:b6:30:29:5a:9d:51:19:8b:74:20:f9:16:b4:
                    bb:a3:3f:84:a0:dd:0a:53:74:6b:09:ee:28:d9:db:
                    48:a0:84:14:88:e9:c4:22:cb:3d:ad:b2:35:a9:45:
                    ad:d1:ea:5f:c5:5f:2b:c2:75:17:ed:20:47:28:9c:
                    df:42:6b:b2:34:3f:62:a6:b6:14:4b:b4:14:a3:2c:
                    a1:e0:eb:6e:6f:11:6a:42:58:ca:6d:83:85:87:41:
                    a6:f5:38:02:a4:8f:48:cc:5d:5a:23:30:0e:9b:d6:
                    3d:8a:2d:8c:b4:b6:40:b1:05:ee:e3:77:22:89:6b:
                    49:ab:b5:7f:28:db:35:4e:be:a3:26:53:6b:25:38:
                    61:11:59:6a:37:31:6f:f6:61:ff:2c:c1:d6:49:cb:
                    26:2d:93:fe:c8:21:a7:42:22:44:36:b6:b5:d0:e0:
                    62:5e:b2:48:36:03:2b:df:0d:8c:3a:40:80:bf:67:
                    c5:c9:ec:09:e5:79:f6:c9:62:46:6d:6d:ba:11:d2:
                    e9:b6:4c:50:86:d9:4c:88:8d:20:d4:89:d5:83:de:
                    c3:fc:d8:d7:34:0b:a8:36:32:54:f0:46:2f:b2:f5:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:38:19:D6:54:70:E2:22:BF:69:11:49:AD:EC:14:64:39:3B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:d2:da:bb:df:4d:4f:8a:a7:29:70:3b:89:5b:5b:c3:a6:
         34:22:2f:08:6a:08:fc:64:7f:71:c5:f7:b5:3d:2a:ba:a9:e5:
         c6:36:d0:d8:0d:c2:fc:cb:be:da:0e:ec:f2:3b:27:0f:fd:dd:
         fd:72:3c:b0:bc:7d:9a:72:83:1b:93:7d:e9:50:8d:d2:72:11:
         6c:e3:f7:b6:85:d8:fd:86:f4:ff:79:f3:a8:ab:53:d5:e7:d0:
         ea:e4:8b:f1:5c:8d:a9:af:2d:5e:b8:d7:1b:b4:d0:bb:08:f6:
         ab:82:b5:ac:a6:8c:9a:da:72:fb:ac:19:40:1e:04:00:69:85:
         a3:9a:a7:9a:ec:3a:e5:65:7e:20:92:ef:c9:7e:61:0c:73:41:
         43:53:b8:3b:a4:4f:fc:b3:97:65:a8:cd:0d:c9:b6:b2:98:00:
         01:44:a0:b0:c2:6c:67:7a:aa:9d:6b:dd:4a:80:b8:16:5f:3e:
         4d:b1:dd:b5:e6:0c:c3:c2:db:69:43:86:fe:3f:1e:58:5a:01:
         c5:07:25:7e:50:ec:36:f3:73:39:97:df:48:f3:23:21:63:14:
         be:a0:c3:06:09:e2:fa:b5:7e:89:73:0d:ee:46:90:35:81:34:
         43:2e:86:d1:52:70:04:aa:c6:15:12:88:34:f0:e3:fc:5f:39:
         7f:eb:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:37:00 2025 by rpki-client