Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/0437ef94-a3d1-3d91-8c55-98163b980798.roa
File:                     0437ef94-a3d1-3d91-8c55-98163b980798.roa (raw, json)
Hash identifier:          2lXYQ+QKeXnvKLCYES8pMUnr7lle0n++S7HLiOqC4Is=
Subject key identifier:   A1:22:93:DF:50:66:EA:CE:B7:71:23:0C:6B:84:7A:58:3F:F2:F3:4F
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F4328584ACCA649CA06AD88C8FCFC3EC8
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/0437ef94-a3d1-3d91-8c55-98163b980798.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     13649
IP address blocks:        208.89.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:49:ca:06:ad:88:c8:fc:fc:3e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=5446e461-d895-4238-9581-10ea4b0e79ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:e0:23:53:71:ee:7c:08:55:6c:bb:ea:ae:
                    c2:28:09:69:69:55:c3:db:16:38:6e:21:73:9e:8f:
                    26:1c:de:35:c2:dd:c6:33:d1:0f:f3:3c:cf:fb:f3:
                    df:54:df:f7:d5:ce:fb:38:68:c1:c8:f3:f0:e7:95:
                    24:c3:af:dc:bb:46:5f:38:97:00:ec:72:cf:e0:da:
                    88:72:e5:9d:ad:2f:db:0c:80:10:3c:ef:09:49:a6:
                    8b:42:52:82:46:e4:1a:b7:80:ba:9c:bb:e1:e9:dd:
                    94:59:0f:8d:c2:7c:24:27:26:e2:e6:a1:75:bc:15:
                    be:57:b2:e3:34:fc:02:52:78:35:82:34:e1:ee:53:
                    90:a2:16:90:76:4b:db:b5:47:9d:a3:ea:5e:b2:58:
                    40:bd:84:15:8b:fe:07:36:a8:da:83:17:a3:8b:8c:
                    73:21:21:a2:10:c6:47:f9:1a:2b:08:d8:fa:a6:6f:
                    0c:f3:55:d2:7f:1d:e0:8e:bb:da:be:18:cf:f4:4c:
                    a2:c2:25:a4:d3:51:78:fb:37:58:d9:d7:b9:f0:0e:
                    92:8c:83:6a:67:42:d5:f6:9b:39:e1:c5:42:19:12:
                    ca:19:71:f5:ee:88:da:a0:1b:d5:20:94:1d:58:7d:
                    78:88:c3:b5:c3:8e:33:6f:67:36:60:7a:1b:93:b2:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:93:DF:50:66:EA:CE:B7:71:23:0C:6B:84:7A:58:3F:F2:F3:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/0437ef94-a3d1-3d91-8c55-98163b980798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:ae:d6:7b:f4:da:82:28:b7:ed:fa:3e:58:80:ac:da:29:
         5c:e0:9f:d5:ac:28:c0:85:cc:b4:05:03:6a:d2:db:5f:93:d2:
         68:6c:28:f0:52:7f:60:30:df:21:79:ec:57:25:d6:fd:f1:70:
         be:2a:ac:9a:93:2a:d7:b7:58:3e:e0:40:3d:e1:44:de:64:ee:
         97:2d:d3:c9:7f:59:c5:67:27:b1:79:2c:fc:75:d1:3b:9f:24:
         0a:ef:9a:90:cd:f8:fc:2e:7f:ef:a2:5c:46:d5:fe:ec:62:11:
         9e:7e:43:ff:ed:ab:83:69:0c:7a:d2:4f:47:27:32:e1:7b:0d:
         48:bc:4f:e9:f8:6d:8d:60:25:38:b6:01:44:b1:ac:19:21:39:
         88:08:88:53:f8:c8:25:5d:f8:2c:14:4f:80:44:1e:44:bb:58:
         b4:f7:9e:a8:0d:4a:2d:50:61:b3:26:a0:84:26:50:6a:bb:28:
         2c:7f:1d:e5:c7:00:83:e6:18:e3:39:27:05:b0:f3:f5:22:5d:
         83:98:36:46:9b:84:f0:cb:10:9d:5c:1a:4a:e6:83:3a:61:14:
         b5:ce:2f:e5:dc:a5:00:51:fb:c7:cd:2a:2c:bd:b5:75:b9:b7:
         27:3e:34:c6:b8:92:7c:15:df:d0:6f:70:be:74:91:1e:87:8a:
         5f:ea:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:53:58 2025 by rpki-client