Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/5e363b81-0da7-38c5-892f-d84a3580b492.roa
File:                     5e363b81-0da7-38c5-892f-d84a3580b492.roa (raw, json)
Hash identifier:          WQdnrSS8cm09/MZtXaO5qejfFV9g27NEjoKsNVOHQZ0=
Subject key identifier:   91:26:58:38:6B:9B:F7:48:83:87:A2:1B:F8:AC:E2:A4:D0:17:C7:A2
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584AFC0D7C55F3C724E685908000
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/5e363b81-0da7-38c5-892f-d84a3580b492.roa
Signing time:             Thu 21 Aug 2025 16:40:48 +0000
ROA not before:           Thu 21 Aug 2025 16:40:48 +0000
ROA not after:            Wed 19 Nov 2025 17:40:48 +0000
asID:                     16504
IP address blocks:        156.70.144.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:7c:55:f3:c7:24:e6:85:90:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Aug 21 16:40:48 2025 GMT
            Not After : Nov 19 17:40:48 2025 GMT
        Subject: CN=d0c1f9b4-ddc1-412b-a255-76e10c9bdb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:4b:0e:b9:db:56:e4:da:49:81:7e:8f:a4:
                    3c:01:f8:4b:3b:4b:ca:ae:e5:5d:f0:cf:0f:70:07:
                    b5:c7:10:cf:64:64:d7:14:21:e1:5a:9f:95:3b:b5:
                    c4:95:85:48:ad:61:95:f4:39:65:f0:92:f1:3a:25:
                    d0:27:1b:48:76:28:92:15:e2:b0:f4:39:d8:5e:fc:
                    24:d8:35:31:a1:18:04:d9:56:0c:75:2b:76:e5:58:
                    87:8e:eb:04:89:08:4d:85:72:4f:c0:59:a9:5c:47:
                    81:64:2a:76:cd:48:70:d5:7d:48:9d:50:df:b2:81:
                    2c:65:2d:a4:6b:94:5f:2f:7d:82:24:0f:79:5d:bc:
                    dc:db:64:96:5e:16:3b:07:37:43:8b:05:d6:b0:dd:
                    ce:3a:42:df:0c:5a:0b:60:83:39:57:50:17:fe:4f:
                    0d:6c:7a:66:4e:a7:67:b7:18:e9:e2:b2:b2:7a:36:
                    7e:93:8f:ca:85:30:3c:6b:32:9d:e6:99:20:c3:95:
                    c0:e1:a5:d0:fe:6c:ba:4a:1f:0d:af:03:43:fa:bd:
                    cf:11:a4:bf:d3:ab:65:12:f2:52:eb:ae:57:d3:d7:
                    af:3d:18:19:93:10:18:58:bc:14:7f:f4:bc:29:ad:
                    f7:0f:7b:54:98:08:2f:e9:42:b5:4a:c3:af:e6:ae:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:26:58:38:6B:9B:F7:48:83:87:A2:1B:F8:AC:E2:A4:D0:17:C7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/5e363b81-0da7-38c5-892f-d84a3580b492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:8d:4d:14:dc:34:bc:16:f2:21:08:c2:67:52:2e:62:bd:ac:
         23:ba:6b:88:d6:fe:2f:21:a5:d6:be:01:5e:c5:6f:fc:e5:a8:
         2d:01:c9:5c:bd:ac:2d:c2:a4:c5:0f:f8:84:8a:e1:d7:8b:5f:
         6b:aa:33:b8:45:68:10:4c:92:1b:6a:03:d6:70:19:e4:5b:ae:
         72:7b:f9:1c:f4:b5:4c:24:a5:05:67:6f:c9:dd:93:d1:f6:98:
         bb:06:8f:ef:63:f7:80:aa:21:84:22:0a:af:24:70:47:4c:90:
         79:98:2b:17:97:ef:04:07:c6:00:73:c8:b9:3a:b1:bc:b1:6e:
         62:61:ea:39:a1:6a:78:8e:ab:06:5b:fa:6b:c9:79:b7:a2:10:
         78:ab:fb:40:4d:7b:15:7c:f4:eb:15:92:8b:73:53:60:2d:1a:
         0f:dd:ed:41:b6:ea:11:da:f6:ad:d4:8f:60:4c:fc:1b:aa:21:
         fd:f6:5f:9f:f9:8c:74:5a:14:f7:64:a8:00:0a:fe:31:53:6a:
         ba:e9:4b:06:f3:6c:aa:cd:a8:9f:2e:9d:b5:03:eb:82:2e:fc:
         14:27:f8:e2:af:de:53:3f:4a:19:53:9f:27:ee:fe:46:da:c9:
         ec:bb:e2:95:e4:76:b6:aa:40:d3:a5:dc:57:4b:4d:32:23:fd:
         e6:33:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:32:15 2025 by rpki-client