Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa
File:                     acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa (raw, json)
Hash identifier:          D3szteHKVeoRp22qveZOBpvw1xV83380fUZEN0JgWxY=
Subject key identifier:   73:DD:02:D8:85:71:99:D6:AE:E3:E6:E0:C8:AA:3C:5C:60:8D:BB:CD
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B13D6C188F23EEAAD6362A9E0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     11290
IP address blocks:        162.244.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c1:88:f2:3e:ea:ad:63:62:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=d6234a33-339b-4955-b458-60a83a917cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:b3:10:84:d0:2c:a8:b4:04:43:75:59:1b:
                    e3:00:49:40:b2:f4:c3:bd:46:41:e3:84:29:58:c0:
                    a7:f3:03:35:f6:0e:62:fa:ff:cb:c7:9d:18:94:19:
                    24:44:ae:5d:24:f4:dd:01:d1:7d:aa:73:0c:dc:8b:
                    f4:d0:ed:04:b9:65:61:79:ad:98:2b:86:86:df:2e:
                    9d:29:fb:8e:58:9b:11:df:f8:81:26:73:fb:02:0f:
                    03:a6:81:82:43:58:01:c2:15:b7:65:ca:ff:19:8e:
                    95:2f:3d:a8:60:2a:1e:20:c1:59:37:0d:3c:7e:ba:
                    ad:ed:bf:45:91:c5:72:cc:7a:ea:2c:00:a5:4c:7d:
                    18:94:a7:f5:cc:64:d0:51:f3:94:c1:04:e0:46:87:
                    07:08:b1:e5:c8:ad:15:64:e9:aa:f7:05:68:e2:0e:
                    53:03:00:c9:50:5a:85:79:34:3e:24:a1:25:78:70:
                    3d:16:3f:bf:25:9a:51:21:f7:72:da:a3:1b:92:a0:
                    c9:5e:ba:75:21:43:45:41:94:af:71:53:4e:38:b4:
                    df:f9:50:1e:ae:f7:a9:5d:92:13:6f:69:e8:49:a9:
                    5f:b0:cf:3e:61:17:e6:8b:4b:6d:c6:37:da:3a:07:
                    ca:e5:23:2e:ea:1c:8a:84:15:2e:ee:ea:bd:03:4a:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:02:D8:85:71:99:D6:AE:E3:E6:E0:C8:AA:3C:5C:60:8D:BB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:ce:46:72:6d:04:75:48:27:2a:99:a0:29:b9:8a:95:66:
         8f:8e:5b:08:26:61:ec:98:17:81:9d:d7:33:3d:51:aa:ac:87:
         74:cd:b9:cd:c6:16:a8:54:92:62:6e:ed:99:3b:1d:3e:ec:51:
         e3:80:7d:2c:f6:84:a8:7f:b9:16:af:d9:6e:fe:1e:b1:0b:a3:
         d6:81:11:4f:88:72:7b:b3:c9:2f:8d:67:05:f5:82:4f:50:6f:
         95:f1:41:b5:01:2b:ee:b4:37:ee:5e:a7:97:a4:9b:bd:c0:75:
         06:c8:a9:95:59:b6:6c:59:2c:e8:f7:56:9a:12:60:2c:51:3d:
         4f:07:27:ea:15:e8:05:29:e6:fa:08:ed:4a:f7:de:4d:72:55:
         cc:5c:77:17:c4:eb:9d:49:56:12:8e:2e:06:89:d0:4d:e9:d3:
         28:fd:59:46:3f:25:8c:18:9e:a8:27:3c:ee:ec:85:8b:b1:e4:
         95:ed:76:3c:10:dd:f2:76:cd:ba:90:e6:dc:8f:f0:5e:f5:36:
         bd:05:06:64:9f:a9:e2:ee:6f:66:48:22:4b:6f:9a:43:73:df:
         98:c4:c2:68:d6:6c:bb:94:4a:5b:36:fd:69:c6:75:58:f3:08:
         90:a3:e6:52:4b:7c:db:70:b3:35:2c:b1:2b:37:46:38:a3:b1:
         0e:5e:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:17:18 2025 by rpki-client