Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa
File:                     9f0c2946-1408-318b-8471-4ca32d89ac0f.roa (raw, json)
Hash identifier:          gdOmo7V+UkVxgPdFZU2HUZ+6c7ZRc7qNioWZ+FNw28U=
Subject key identifier:   0D:F8:D9:70:1F:E6:AA:AD:7C:43:B3:B4:7B:CF:32:FB:D8:16:69:AD
Certificate issuer:       /CN=ee028edb-9e33-45f7-b0cf-c014e2010825
Certificate serial:       010D0C9F4328584B1806D5BF63AB24FF99669340
Authority key identifier: 64:D6:4F:90:FA:6A:5C:F8:ED:7E:F8:15:23:EC:55:15:25:0A:CE:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     53745
IP address blocks:        140.235.52.0/22 maxlen: 24
                          2602:811:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d5:bf:63:ab:24:ff:99:66:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee028edb-9e33-45f7-b0cf-c014e2010825
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=f7fe9eb2-11f0-4279-8c18-70eaa38aa495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:75:ac:9f:04:58:fa:0d:5e:aa:f3:ff:aa:
                    36:53:5c:1e:02:d4:04:77:4c:c9:53:4a:87:de:ce:
                    bc:db:04:74:e0:e5:77:74:76:13:2e:19:4d:8d:fb:
                    59:d6:fb:dd:9d:b2:1f:c8:7a:6d:f3:25:1d:dc:f7:
                    3c:62:4c:63:b9:d1:c8:f6:bd:6a:cc:40:f8:d4:c3:
                    3b:a5:4c:e0:2b:cd:7f:b7:c4:04:60:a1:2a:ab:b5:
                    61:91:4d:6b:62:eb:29:3d:63:c1:da:3b:a6:44:d8:
                    a3:23:42:b2:f6:da:3d:d7:df:8d:24:d9:46:d5:a1:
                    76:51:09:cf:2f:ed:6a:c5:f6:cb:9d:fc:71:d3:df:
                    48:b7:f7:bf:48:1b:60:6a:79:e1:52:15:17:a8:d6:
                    13:70:75:81:45:71:6f:4d:14:77:79:ea:fe:67:78:
                    f8:aa:97:84:af:86:b4:71:71:65:d5:2b:ca:5b:2d:
                    77:b7:af:75:bf:8d:be:d3:63:34:00:f0:27:dc:16:
                    43:89:91:46:00:af:ef:38:7f:0e:9a:3b:70:2d:f9:
                    c9:14:b9:9b:da:46:c9:c4:a1:27:84:52:5e:78:70:
                    d2:d9:3b:0e:9b:fc:f9:ba:48:cd:90:35:a9:2e:73:
                    d8:74:7b:4c:8b:f2:36:3b:8b:31:44:f1:f6:51:78:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F8:D9:70:1F:E6:AA:AD:7C:43:B3:B4:7B:CF:32:FB:D8:16:69:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.crl

            X509v3 Authority Key Identifier:
                keyid:64:D6:4F:90:FA:6A:5C:F8:ED:7E:F8:15:23:EC:55:15:25:0A:CE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.52.0/22
                IPv6:
                  2602:811:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:3a:72:60:5b:84:dc:ca:d6:8b:01:f5:99:24:b7:9c:46:
         76:f9:91:75:75:7d:69:fc:34:fb:f5:3b:9c:05:4f:8f:af:77:
         a8:67:65:2e:28:a8:09:28:ee:4f:3a:5c:a5:ab:c4:9f:53:77:
         af:1e:4d:61:90:2e:48:cc:18:ed:56:e2:ed:3b:84:cc:ba:b3:
         3e:46:92:34:ca:05:13:ef:7e:d0:72:eb:13:81:42:69:93:34:
         14:ca:0a:7b:40:3b:f0:33:4c:41:7c:4b:a9:a5:b1:66:19:83:
         2b:f7:59:22:96:2e:8c:7c:cf:9d:77:29:6a:9d:08:e8:34:3b:
         58:3a:cf:68:f9:1e:95:46:df:6c:84:c6:a6:72:f6:c6:0b:85:
         2a:e7:45:07:ad:bd:25:b7:f8:49:5e:f1:af:0b:5b:13:e2:81:
         b2:b7:38:fc:ea:8b:92:4e:8c:5e:f9:1c:bd:30:2b:50:b8:d9:
         76:0b:2a:df:f6:ef:1b:d9:6f:f7:9b:5f:ec:67:40:2f:2f:cc:
         5c:8b:94:63:a0:7e:53:e4:14:a6:0d:c3:6e:84:68:f6:cc:57:
         7d:a3:69:f2:23:36:1b:13:00:e4:f6:f7:22:8a:5d:55:66:a2:
         7b:84:93:30:77:d4:4a:95:8a:d9:a3:f1:09:3d:14:29:c3:1b:
         ab:04:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:29:42 2025 by rpki-client