Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/18033496-5782-3221-85dc-1cc6d01b6081.roa
File:                     18033496-5782-3221-85dc-1cc6d01b6081.roa (raw, json)
Hash identifier:          3siOMRVJsWwIl482wozhC+ClpCBkrTrKUbKsdCEqHu8=
Subject key identifier:   6B:F8:40:46:C7:9E:27:E4:ED:23:5B:51:A9:E5:FF:93:82:11:3D:C6
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B2066D2C6F30D6147D89292A4
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/18033496-5782-3221-85dc-1cc6d01b6081.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        216.113.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d2:c6:f3:0d:61:47:d8:92:92:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=ae07209d-7c85-49f9-b05a-33864b934948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:40:f3:dd:f0:a6:d4:ec:68:b4:cc:82:b0:
                    10:2c:92:bf:35:bc:a7:61:a0:ea:7b:9c:53:b8:28:
                    ca:59:ab:13:c6:5d:3e:05:d6:04:cc:a5:e6:ba:e7:
                    7b:76:7e:a2:8f:19:c9:e6:81:4f:63:20:de:9f:18:
                    90:5a:67:4c:e8:be:11:a8:a7:8a:2a:ac:f8:e3:18:
                    cc:43:83:98:7d:d7:1f:8c:0f:37:7b:b5:92:21:40:
                    e5:92:b9:16:eb:e1:e0:f0:86:a6:b0:32:db:14:df:
                    eb:ae:86:a4:38:ef:99:d9:58:4d:04:15:56:19:b3:
                    d3:b6:34:15:b6:7f:d2:e0:11:c3:15:28:f8:00:b9:
                    ee:2c:1e:7f:56:d2:77:a3:bc:bc:bd:0a:71:f7:46:
                    86:34:4b:dc:20:90:ef:21:35:5a:f3:b2:d3:c3:8c:
                    34:56:18:ab:71:29:93:50:ac:0e:00:e8:c0:48:ec:
                    a0:84:a3:7a:e6:32:aa:f1:01:42:12:81:52:ba:4c:
                    dd:8a:11:1e:a6:c6:5a:cb:0d:30:39:2c:d6:33:5b:
                    79:ba:41:1c:e8:fb:a3:35:2e:26:12:09:61:36:cd:
                    81:12:c5:06:23:48:e0:02:35:6c:e3:9e:83:03:ab:
                    06:90:83:65:a9:a0:2d:0d:9d:cb:1f:86:f2:c0:e6:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F8:40:46:C7:9E:27:E4:ED:23:5B:51:A9:E5:FF:93:82:11:3D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/18033496-5782-3221-85dc-1cc6d01b6081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:39:74:8a:18:5f:2c:c5:91:6e:7f:c4:1c:1c:ee:f6:78:47:
         64:f2:18:9c:05:89:6a:23:60:57:81:da:bc:b1:ca:7c:0f:30:
         b2:80:af:af:53:21:08:cb:ea:0a:1e:47:5b:dd:a6:38:35:2c:
         fe:09:08:ac:55:49:fd:bf:5f:af:03:31:e3:ae:8e:e7:7a:a4:
         49:d9:0f:2b:70:84:02:df:26:0e:63:a0:02:5b:af:b3:91:34:
         cb:00:72:96:9d:2e:15:09:7e:c0:e6:4e:20:b8:94:79:a6:05:
         31:27:da:58:a0:47:d4:57:de:2a:fe:21:41:8c:ad:1e:11:75:
         33:52:ca:a9:b4:fb:e5:01:7e:44:b5:dd:af:ea:17:61:a2:02:
         51:bb:15:01:7a:51:1a:61:1d:a2:88:91:f3:76:6d:cb:30:e9:
         a0:c0:77:8a:b4:e8:89:7c:78:c4:17:79:24:3f:a4:b1:42:24:
         2e:96:b6:64:c7:76:c1:98:42:bf:06:1e:65:f8:fb:1c:5f:42:
         09:8b:da:68:a6:e9:09:79:1c:1d:b0:e0:7b:82:21:1e:26:01:
         6f:4a:a5:31:5e:ff:a1:27:d8:2d:35:78:d4:2d:b5:86:ec:98:
         d1:fe:6c:dc:4e:76:91:c9:fa:1d:63:ed:ba:bd:f4:f8:d3:63:
         98:d7:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:41:17 2025 by rpki-client