Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa
File:                     aedbe3d8-a938-347c-a902-e7d97e409a71.roa (raw, json)
Hash identifier:          EcI/ap6KqmmUJHfbSTyHmJthonAiJPYiivmGQ/M+EvM=
Subject key identifier:   CB:64:EC:9F:50:69:13:7D:5D:EE:EB:F5:66:59:8E:F2:BB:F0:29:D5
Certificate issuer:       /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Certificate serial:       010D0C9F4328584A74B5E02172DAD28B8B1B8000
Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     13631
IP address blocks:        64.22.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e0:21:72:da:d2:8b:8b:1b:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=e520efb2-d1df-4cad-91bd-6aff5804a7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:5d:7c:05:69:01:8f:66:51:ae:ec:de:d3:
                    a5:76:74:42:97:53:21:78:97:52:a5:f3:fb:85:b2:
                    6c:c3:bd:3e:6c:1e:2f:84:ac:15:73:8b:97:5d:b9:
                    35:0c:43:f7:29:e0:ff:1b:a3:9f:fe:ec:b4:37:66:
                    51:9f:99:8e:3a:3c:92:c7:e9:7f:aa:75:44:fe:24:
                    3d:76:6a:cb:5f:b8:11:99:a6:99:cd:05:ec:28:84:
                    5a:9c:98:93:4e:f7:bb:fa:f3:24:27:b2:55:80:97:
                    12:f7:16:3e:cb:9a:70:76:7e:2b:fb:73:72:01:df:
                    2e:a6:d5:2b:bc:9b:b7:ec:0e:41:a6:a0:c1:c2:f1:
                    e4:9f:a1:1a:65:80:08:ad:32:26:f5:b0:ae:78:91:
                    9c:1e:4b:51:2e:fb:e4:5b:bb:79:56:f6:2f:3c:01:
                    6b:60:f1:98:10:b6:0a:c5:64:39:e3:c7:32:0d:9b:
                    b6:64:f4:3b:56:b3:3b:36:55:62:a7:8c:0a:8d:de:
                    65:f8:f1:8e:80:95:d6:46:25:b9:53:59:88:b6:a4:
                    71:07:af:4f:a5:1f:d6:54:b8:96:03:89:62:ee:4d:
                    14:b0:ad:a7:70:c0:af:cf:8c:5e:74:57:07:d1:ad:
                    a6:ed:2c:35:6a:1b:0f:6c:a4:fb:05:b4:5a:3e:09:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:EC:9F:50:69:13:7D:5D:EE:EB:F5:66:59:8E:F2:BB:F0:29:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a6:da:39:c7:ab:6b:96:b9:17:b4:8f:79:2c:a3:a9:fd:a4:
         f5:69:bc:22:bd:24:82:ed:be:fc:e5:9b:ae:2f:1d:e9:92:86:
         3b:d7:3e:76:38:cc:f1:91:fa:7d:3b:8a:77:dd:7d:6f:94:46:
         17:11:4e:b7:8a:64:29:b1:34:1e:12:58:c8:aa:14:35:fc:d9:
         cb:31:da:af:c8:6c:7a:a1:e1:a5:eb:bd:84:f4:c3:ee:48:9a:
         3b:2a:f8:a2:3b:fe:a9:d5:3c:52:d4:90:9b:be:6e:b4:6a:9a:
         05:75:29:eb:f7:9b:b4:2f:c1:af:42:2b:30:76:93:b6:8e:8e:
         f9:07:82:1b:e6:31:e3:39:df:23:e6:6d:5e:06:ad:e8:2d:0b:
         35:45:75:21:ef:84:53:47:3c:b1:85:fb:6a:45:ad:b8:dd:a9:
         20:1c:97:de:5a:40:df:94:0b:c7:58:14:11:e7:dd:06:c9:a0:
         6c:65:93:0f:ec:41:5e:e4:ee:2d:ae:eb:ae:9a:e2:d2:f1:84:
         25:d0:70:f2:c1:b5:44:f7:8c:53:8c:08:ee:52:c1:f1:74:db:
         29:6c:38:7e:b5:06:22:0a:47:cb:2b:fe:36:6b:24:cd:8d:21:
         e6:5e:b8:46:37:70:1d:22:32:ad:30:3d:6f:9c:ae:3f:6f:d4:
         92:af:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:26:00 2025 by rpki-client