Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb8fa951-ef22-3739-9a75-f7f757fcbb60.roa
File:                     fb8fa951-ef22-3739-9a75-f7f757fcbb60.roa (raw, json)
Hash identifier:          Xjw3VY5Cvz7XfpPuycb+dETIWQ3kY7vpBr60xtJGEBQ=
Subject key identifier:   C6:58:73:80:D0:96:3C:FB:39:83:CC:C8:3B:4E:18:0F:C1:6C:26:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A73EB7B0AEF27D2F09C7C4E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb8fa951-ef22-3739-9a75-f7f757fcbb60.roa
Signing time:             Tue 08 Jul 2025 18:13:11 +0000
ROA not before:           Tue 08 Jul 2025 18:13:11 +0000
ROA not after:            Mon 06 Oct 2025 18:13:11 +0000
asID:                     401152
IP address blocks:        144.225.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:eb:7b:0a:ef:27:d2:f0:9c:7c:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 18:13:11 2025 GMT
            Not After : Oct  6 18:13:11 2025 GMT
        Subject: CN=894edb6e-8f95-45e7-9877-afbf86fb8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:d9:1f:cc:55:57:cf:50:1a:db:68:5d:3e:
                    78:08:c9:5e:40:58:79:f2:4a:9e:1a:1d:c6:55:a3:
                    a6:a6:26:03:72:10:5f:ab:dd:ba:c7:6e:9e:9f:45:
                    ed:c2:bd:7b:7d:f0:dc:2e:df:5e:1f:9d:1e:83:9b:
                    df:68:ef:f0:5b:3a:24:dd:93:df:07:62:5a:63:dd:
                    50:44:44:a2:96:68:97:2e:84:8a:92:aa:6e:90:59:
                    71:51:1c:fa:08:65:a1:59:90:99:18:d8:71:d6:9f:
                    7b:00:d9:84:5b:77:14:59:12:1f:db:0d:fe:9a:40:
                    b8:ee:12:54:6d:6b:07:2c:0b:85:31:b2:2f:b5:1b:
                    5a:6d:5f:d9:e1:37:5a:8d:55:37:02:c1:95:38:0e:
                    d7:f0:60:21:3e:6d:fb:22:56:bf:c8:d1:eb:f0:76:
                    62:df:75:e2:40:4f:4a:ee:b5:cc:d4:97:5e:32:35:
                    a7:85:9c:ee:e9:37:81:5f:0a:a3:b2:b3:31:33:3f:
                    8f:f3:b6:3b:ac:14:f6:30:c1:3f:b0:d4:d4:75:eb:
                    35:d1:1c:78:9d:22:56:4a:10:b0:68:b5:ad:c4:5f:
                    44:46:c0:a0:26:b0:e9:8c:5f:94:6c:00:51:b5:43:
                    02:12:e9:3f:6d:d0:bd:cd:cb:48:79:77:28:51:49:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:58:73:80:D0:96:3C:FB:39:83:CC:C8:3B:4E:18:0F:C1:6C:26:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb8fa951-ef22-3739-9a75-f7f757fcbb60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:08:47:82:7c:f0:2b:8f:d9:82:ee:40:18:66:d2:b0:8b:
         1a:a7:23:6b:8a:29:f7:0c:4a:c2:f5:36:4f:05:7e:a4:cd:22:
         12:62:d2:9b:07:ee:ab:90:cc:aa:8b:ba:25:24:ae:7e:37:1d:
         57:18:c7:86:a7:fd:44:72:c8:c1:ff:a5:74:af:aa:88:36:09:
         25:74:e4:ee:4b:55:b3:cd:19:16:26:57:41:59:d6:2b:c5:ad:
         2b:25:23:2b:e9:40:6a:75:52:9d:61:b9:7f:44:71:ed:d5:ab:
         be:23:95:3d:9a:09:d5:17:c1:f9:8e:04:ae:db:7e:3d:84:8e:
         8f:ce:c3:72:93:bb:c9:21:95:e4:cc:96:6c:45:aa:d2:37:b1:
         ba:74:f5:a2:12:2b:6d:96:8e:88:51:ca:ff:2a:6c:1a:03:fe:
         cd:98:fc:96:8e:b6:7f:42:56:d4:28:b0:4c:28:d9:ca:ec:75:
         2a:ed:30:df:5b:a7:13:a2:4b:d8:bf:c7:c4:c7:63:1f:ad:3a:
         e3:40:42:36:04:d6:0e:17:93:c3:f8:f2:9a:5b:95:86:ff:23:
         0b:08:d9:05:2d:5d:ce:d1:c4:57:17:4e:5e:df:d6:ae:fe:e3:
         91:36:76:c4:47:75:32:68:b2:ff:3f:44:fd:4f:4a:19:ad:96:
         d4:98:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:44:31 2025 by rpki-client