Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
File:                     4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa (raw, json)
Hash identifier:          vBldjsnJ+9Ol7Bl/LjtsbJQUAvLCnTCz3LJozH3tBuw=
Subject key identifier:   27:23:31:14:55:78:47:4F:23:20:AE:7A:F2:38:8B:22:11:B2:A4:42
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584B25FC4578715816808F319940
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     26342
IP address blocks:        170.194.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:45:78:71:58:16:80:8f:31:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=6e875f7a-5f71-470b-b579-24f3efa7be67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:d6:5f:e1:f1:e9:4d:f9:b9:9d:1f:5f:c1:
                    ab:c5:9f:97:a3:2b:2d:c8:f7:8b:bb:52:46:e9:9a:
                    91:84:68:e9:c4:8e:56:06:2f:3a:39:dd:80:12:29:
                    6d:d8:24:f9:84:75:db:77:ad:f9:2e:1e:81:11:53:
                    86:f0:ae:55:c1:9e:92:d3:28:2e:c2:9d:b0:df:97:
                    90:a5:dd:89:61:72:5d:19:48:f3:ad:8d:09:fd:a6:
                    f8:00:87:a5:6c:40:e3:9b:9b:dd:b3:3a:0c:f4:18:
                    88:50:0a:38:73:83:9d:76:ce:12:b3:3b:71:93:a7:
                    e0:4c:39:a5:f4:01:0b:c2:a9:19:6f:1a:b1:de:bc:
                    82:0c:fc:3a:b3:ca:40:b6:b9:32:5e:f1:de:24:17:
                    58:4c:4a:b9:c6:69:a7:3d:23:42:b6:4a:88:8a:4d:
                    66:11:13:db:19:a0:75:16:56:e4:08:01:81:20:68:
                    fe:f4:bc:6e:cb:47:57:8d:f2:78:ff:78:c2:f9:c3:
                    ac:f6:44:eb:b9:c9:d4:d3:0a:3b:9f:9e:e4:71:e8:
                    11:a2:eb:a2:d9:fc:9b:41:ca:88:c0:9f:d7:05:a8:
                    6f:90:b0:58:f0:4a:14:93:e9:eb:35:b2:5f:79:c8:
                    d8:28:89:1c:7f:ad:26:2f:1b:69:43:2b:31:7d:60:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:31:14:55:78:47:4F:23:20:AE:7A:F2:38:8B:22:11:B2:A4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:be:6a:5a:62:ef:01:b8:6f:fc:3c:b1:94:59:52:81:0c:
         19:f2:db:35:0c:e0:6a:c9:30:d6:28:78:f0:dd:0e:dd:7a:20:
         05:4c:06:3d:2a:df:cf:23:f6:f8:8f:b5:bb:53:97:dc:b3:92:
         09:3a:f3:46:c5:83:74:73:0a:0b:a7:bb:96:12:6b:09:42:d4:
         f5:68:e7:56:02:c5:9b:c8:f5:ff:89:b2:c3:f7:eb:82:04:82:
         1e:53:45:e5:ce:06:19:7b:c3:83:2f:a7:33:0b:17:41:bc:3e:
         99:6a:01:49:6e:da:fc:87:ee:0c:02:d5:9c:c8:69:15:3d:39:
         12:3f:69:1e:ca:1f:9f:bd:e8:08:e9:33:2e:f7:f9:3d:35:0a:
         1f:4a:95:e4:97:20:18:df:fd:8a:22:86:f1:0a:97:cd:9f:0a:
         ed:2d:f8:d7:a0:f2:27:b4:a8:a6:65:b0:66:74:1e:02:62:59:
         f8:fa:0e:0c:87:a9:1a:86:c5:9f:0e:c3:63:7f:01:b1:54:97:
         4f:d6:ff:1a:40:18:34:47:a7:3a:3b:c6:11:c3:8a:b1:24:35:
         8b:9a:a4:69:cf:78:a7:58:80:a5:22:92:c4:0b:e2:85:45:15:
         bb:6d:69:36:35:62:f9:f2:f6:c3:3b:50:7e:64:34:d3:86:e7:
         7d:99:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:22:12 2025 by rpki-client