Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
File:                     c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa (raw, json)
Hash identifier:          7GdzI1TpHobqrIF+hojqFokxHS8tPnyJ5QFlEhzUTgM=
Subject key identifier:   D4:DA:92:59:24:80:53:22:3F:CD:A2:9B:04:6F:87:0F:69:68:3D:59
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584AF521251CF0404EDCF02F8600
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     10747
IP address blocks:        45.42.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:25:1c:f0:40:4e:dc:f0:2f:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=a65bdadc-9729-414a-ac18-2aa3b2ecf0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:2f:27:92:9a:d8:18:bd:86:8e:97:4a:06:
                    c5:d9:6e:01:65:46:a7:5f:2d:02:56:58:c3:1f:78:
                    1d:bc:15:3f:df:c4:91:76:51:c0:39:37:00:1b:95:
                    35:58:d5:20:80:50:9a:7b:b4:1d:32:55:20:0c:ce:
                    a6:fa:f3:93:28:80:fe:2c:8a:f5:50:93:87:90:9b:
                    d7:f8:d5:6f:14:e8:08:22:ed:96:77:c2:69:ba:09:
                    f7:c3:b0:7c:2e:35:9f:a9:cc:43:b9:05:bf:90:56:
                    0c:c4:90:76:e2:e3:44:fd:00:96:59:70:ee:86:d1:
                    d4:df:3c:a2:f9:74:3e:fb:ce:72:0d:17:9c:07:e6:
                    fb:6a:b3:0e:f7:81:5f:8e:0a:c0:eb:d7:89:3f:36:
                    3a:fc:0a:d0:0a:c5:0f:b7:fe:be:fa:ce:12:74:63:
                    34:b7:91:e4:3e:e7:82:4e:0c:e0:50:c6:db:bf:17:
                    02:98:11:62:f2:0d:64:fa:19:f9:54:ce:7a:e1:61:
                    fc:06:bb:c9:41:eb:2e:a2:e0:58:b1:4c:b3:10:9c:
                    7c:b8:a0:51:3a:c2:3c:3a:cc:5d:9e:71:50:ac:50:
                    e5:08:a5:ee:fd:e4:a9:bd:54:07:21:00:6e:85:ba:
                    a0:c8:eb:92:76:1f:28:8f:31:0c:7a:8d:9b:44:d3:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:92:59:24:80:53:22:3F:CD:A2:9B:04:6F:87:0F:69:68:3D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b4:6b:93:b9:36:67:50:f9:b8:f9:4a:c5:c1:6f:6c:aa:b5:
         9b:cd:9b:e9:d4:64:c0:a1:4a:60:9d:59:0a:f3:b9:52:75:47:
         3a:46:45:4a:47:33:48:20:59:d1:c3:67:22:07:95:96:57:b4:
         34:98:c0:b8:ea:bb:4a:f8:03:4f:cc:e5:2a:73:1f:5a:9c:4f:
         e0:af:6f:63:67:3a:d3:1b:c2:7b:cc:fe:fc:30:a2:2e:67:7d:
         63:11:a9:82:78:e1:85:fa:51:04:c7:38:75:85:a0:b7:74:50:
         0d:32:e6:18:1b:27:67:20:86:cb:05:8d:1a:1c:00:a7:6d:a9:
         50:4f:93:16:5f:b7:0a:21:40:08:ed:47:fc:d2:25:7c:54:7b:
         03:37:9c:af:aa:fb:0f:6c:55:aa:70:f5:85:88:53:40:bd:e8:
         39:66:b0:aa:28:18:f8:d0:a0:f1:1a:77:a5:c0:4c:f4:42:e0:
         1c:ee:9b:8d:ed:04:d3:e0:bf:16:e1:72:b9:01:9e:05:a5:ec:
         1e:d0:79:57:f9:54:ac:48:30:a3:09:fd:ee:e7:1b:a1:34:ee:
         51:e3:ea:fd:64:f7:05:0c:0b:6e:61:24:f1:d6:47:9c:5a:24:
         f8:cb:99:5f:44:55:27:e5:db:92:b8:38:53:65:00:73:6b:f4:
         44:e0:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:16 2025 by rpki-client