Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9fb212d9-144c-3326-969c-a041694624f2.roa
File:                     9fb212d9-144c-3326-969c-a041694624f2.roa (raw, json)
Hash identifier:          EVWDgZtRHMAYIi1v+cJ/fI8qxgrLpqKN0qfPuDA6UaA=
Subject key identifier:   05:27:06:E0:C9:83:15:A0:48:EA:23:54:CC:56:7B:BC:65:3F:B0:4E
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A74B5DBD12DBE6C94C0858F00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9fb212d9-144c-3326-969c-a041694624f2.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     11090
IP address blocks:        198.135.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:db:d1:2d:be:6c:94:c0:85:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=393f4a7a-0bc8-443e-99fa-568901d4bfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:71:22:01:45:2e:88:49:dc:41:2b:79:56:
                    e0:c6:2a:43:0c:0a:dd:da:fb:92:bf:51:98:ea:03:
                    ee:27:f5:a7:80:21:69:e9:d3:e5:91:96:63:25:1f:
                    fc:3d:08:41:b7:4e:4f:d1:d6:58:8e:4d:f8:90:c6:
                    4a:a7:ee:85:99:67:49:66:53:0f:0a:63:9d:a2:f1:
                    41:3f:97:e0:d9:53:3a:12:2a:26:51:60:c7:82:6d:
                    bb:ba:81:48:b9:df:76:7d:55:fd:b2:7e:aa:ae:41:
                    a0:4a:d4:81:1b:a7:d5:77:64:c8:9c:52:89:03:81:
                    a0:fa:bf:b0:04:6c:21:48:8f:9c:21:12:44:e4:06:
                    4e:cc:c0:2b:3d:dd:2d:9c:fc:94:25:c7:1d:35:ba:
                    4e:6d:ef:17:53:bc:69:06:cd:24:9d:86:8c:b1:8b:
                    d4:35:20:c1:fd:a4:16:eb:93:e4:fd:93:6f:eb:70:
                    99:d4:d0:e8:8b:49:fb:f5:ba:08:d0:c9:c5:de:a3:
                    b6:8a:fb:bc:f7:61:10:91:22:e7:f8:17:13:f0:05:
                    db:12:0f:ca:e4:e6:6d:92:7f:dd:e5:df:00:17:02:
                    e0:25:62:cf:8b:cc:b3:d3:ee:20:35:e7:3b:03:42:
                    54:7d:cd:c0:36:6f:0d:03:b1:d7:e5:27:c9:8a:46:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:27:06:E0:C9:83:15:A0:48:EA:23:54:CC:56:7B:BC:65:3F:B0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9fb212d9-144c-3326-969c-a041694624f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:96:8a:fe:49:60:59:84:50:78:91:b5:48:73:0b:94:2a:
         69:de:0c:fa:d2:c3:c8:83:28:56:40:dc:3c:03:f6:0e:9b:d3:
         f2:1e:48:8e:46:b4:0d:10:fc:cb:45:ee:e5:76:f0:c2:09:8a:
         e4:b7:b0:cc:f3:fb:e0:cb:ae:a6:94:06:a6:9f:93:25:c6:b4:
         6c:2f:9f:75:69:01:2f:4c:53:61:e3:57:e6:34:0a:8b:b1:21:
         a2:d1:e7:8a:f2:94:27:5a:d1:ba:61:48:ee:43:5b:33:04:bb:
         c3:4c:ab:5a:32:6b:63:05:54:0d:cd:82:3f:12:0c:29:63:ac:
         5b:b6:e1:6c:1a:be:e8:06:c1:92:c3:26:28:eb:73:ff:72:89:
         83:14:a8:5a:2c:4b:51:54:dc:d8:c0:23:36:9d:7e:4b:f3:cf:
         c5:93:27:d7:36:da:13:7f:e7:d5:f1:a5:bf:69:5d:98:cd:ef:
         9a:5b:63:c2:c0:47:76:a7:16:32:2b:32:8d:4b:de:fe:49:e0:
         6a:2b:ac:2f:2a:2b:5e:1b:c8:34:d5:55:fb:30:52:2b:8f:11:
         b6:e5:0b:56:34:cc:21:1b:ed:75:5f:ac:90:71:7f:af:bf:78:
         28:79:d2:ea:44:7e:99:18:8a:18:05:7a:4f:f5:25:1d:6a:6d:
         0d:cb:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:42:25 2025 by rpki-client