Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa
File:                     88fbe284-82b8-3e50-9540-cbc896e974e0.roa (raw, json)
Hash identifier:          YbnCRYso90V0DVDI0iexNy139oraQyIzPjsvoHJG2Wo=
Subject key identifier:   7B:5C:D8:49:9E:89:05:8C:E2:67:8B:F1:E3:51:8A:86:8D:97:2E:B4
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584B2CF6E403593C06A6830200C0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     25697
IP address blocks:        209.94.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e4:03:59:3c:06:a6:83:02:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=9e6cb4bc-1ab2-457a-bee8-8ef1a939463f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:e3:2b:04:6d:b2:0e:85:03:a5:19:5d:4e:
                    fb:2b:a9:3c:7b:9d:8c:f6:2a:a9:cc:9d:e8:b8:24:
                    de:96:d0:b4:72:c0:8d:cb:11:74:a4:fd:e0:e8:ab:
                    e5:70:ca:cd:57:55:97:e7:de:7b:4e:99:e2:f4:02:
                    33:91:7e:b8:73:76:8e:e0:56:7e:e7:2c:05:5f:9e:
                    d9:df:cc:c9:1b:be:c8:14:86:2e:b8:48:40:fb:1d:
                    37:62:18:40:7b:33:df:d0:e3:9e:e1:6c:a2:4e:5d:
                    36:28:90:b3:59:23:4c:a2:27:29:47:1c:c7:bf:cb:
                    4d:52:7e:3d:56:36:d2:b1:32:85:39:ac:2a:ac:0c:
                    fe:fa:94:58:fa:8d:93:b9:03:16:26:dd:40:a7:46:
                    5f:5f:2d:e4:48:71:42:7e:21:ff:79:62:f5:5b:9a:
                    04:f7:16:a9:ff:98:3f:6f:08:30:6a:93:3a:b0:40:
                    48:37:58:fb:2d:30:bb:61:bb:dc:00:00:6a:54:36:
                    7c:e2:8b:41:a5:7d:e8:2f:b0:99:22:1a:1c:92:cc:
                    0f:c2:30:e7:b7:09:d9:43:ab:a0:53:e6:ad:cc:cf:
                    0e:c6:f9:ff:04:9a:09:eb:57:42:85:5b:3b:69:73:
                    55:1c:ea:3b:0e:8b:8c:a7:c0:6d:f9:92:ab:4e:9e:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:D8:49:9E:89:05:8C:E2:67:8B:F1:E3:51:8A:86:8D:97:2E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/88fbe284-82b8-3e50-9540-cbc896e974e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:16:58:da:16:39:27:bf:0b:d2:9e:a4:38:d9:94:4b:ce:
         c4:74:c3:a0:51:ad:71:fa:58:32:20:61:c5:cb:9c:d2:0f:bf:
         50:b7:8f:07:89:80:48:6c:e7:c6:29:ef:5e:03:0b:2d:86:64:
         51:c2:51:b3:90:9a:3f:7d:a8:aa:4f:f5:c7:47:cb:5f:d0:8f:
         f2:dc:67:2b:1d:ba:ec:7e:2a:4e:c3:40:dc:71:cc:f0:04:bb:
         d9:36:cf:9d:0b:b6:6c:85:f7:52:00:2c:4d:2c:5d:01:30:40:
         99:f1:fc:34:f7:c6:dc:1f:84:f5:1d:f1:2f:91:13:55:cd:b8:
         58:98:8a:c3:2a:af:a6:38:31:94:60:21:2f:61:ee:ec:bb:22:
         31:03:bd:f0:33:e3:ea:41:11:22:48:08:2e:ca:1f:ae:32:51:
         3b:e1:47:29:9c:7b:7a:93:28:17:04:39:20:f7:91:54:09:e7:
         9e:7b:74:96:78:b5:09:84:dd:74:cb:ad:9d:7c:b4:91:78:93:
         b6:d8:65:8d:b3:0d:b5:6d:ff:9b:24:a4:53:db:9c:5c:1e:03:
         8e:ee:3b:70:cb:1a:5b:88:61:eb:3c:5e:0c:35:29:a2:1a:d0:
         40:b3:8c:b4:5a:bb:37:00:0c:05:c2:a1:6e:9d:3d:3c:1f:87:
         25:35:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:04 2025 by rpki-client