Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa
File:                     05198722-f522-345f-a506-ef6cca90a62d.roa (raw, json)
Hash identifier:          2YqPQIP0AoN+dLqiM/cqTWxkDzssomwLsu9xYffWevg=
Subject key identifier:   D4:38:DC:CC:2C:56:3D:77:D2:0B:8A:5A:84:AC:FD:B4:AF:7E:0B:4C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584A8DD5F7CE08686EE9729F1D40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     8987
IP address blocks:        170.85.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f7:ce:08:68:6e:e9:72:9f:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=6d4dda0d-4dda-480e-99bd-1f122719537f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:ea:83:7e:99:dc:03:5c:8b:fb:cc:de:2d:
                    b6:81:ce:15:af:5d:bd:5e:83:18:08:29:c0:f4:86:
                    08:5d:b1:af:ec:ed:69:97:26:8d:4e:b6:1f:4e:ce:
                    61:6c:f4:0e:3a:df:a1:55:90:96:d2:04:e7:a1:8c:
                    eb:d5:f7:1f:2f:9c:dc:0e:3f:ca:70:d0:b2:b1:f1:
                    fc:f6:d2:ef:eb:09:b0:aa:0e:4f:37:c2:d3:8e:6a:
                    7f:3a:38:83:70:45:67:e8:61:ce:6a:23:bd:82:8b:
                    74:b1:73:e1:50:5e:db:e5:17:8b:e5:e8:59:3e:ec:
                    c4:ce:37:79:d4:b9:7b:b9:bf:79:a8:60:42:80:52:
                    de:d5:ca:12:ab:dd:4b:19:d0:37:2a:c6:0f:4d:7c:
                    b7:bc:3a:bc:ab:e7:88:48:89:98:9d:55:f1:9a:73:
                    23:93:5d:3e:42:62:2d:76:c7:ba:cd:78:d5:57:5b:
                    c7:8b:d3:47:05:31:54:f2:c1:dc:08:5a:ae:cb:76:
                    13:18:5a:b3:f6:1b:1a:ed:eb:11:70:e3:55:75:fd:
                    67:dc:cc:ec:de:bc:70:15:78:26:42:f1:fb:5f:0c:
                    61:13:49:da:95:45:30:4a:67:83:bf:93:a7:aa:bf:
                    84:45:f2:e1:64:f2:7a:56:17:18:bd:1e:d0:0e:0b:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:38:DC:CC:2C:56:3D:77:D2:0B:8A:5A:84:AC:FD:B4:AF:7E:0B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:06:a4:fd:6d:1a:3a:7d:f9:bf:67:7c:79:bf:67:dd:44:
         90:80:d1:4b:95:a2:06:6c:79:b4:b4:52:8b:0e:ac:19:de:69:
         6e:48:44:59:ff:06:ea:10:2c:57:d4:dd:44:11:f1:12:66:ec:
         af:2e:b3:ae:9d:ae:3d:6e:d4:e3:07:93:b1:0b:91:c6:6d:8c:
         c6:52:6c:06:a1:69:d0:83:6a:45:61:65:63:5e:02:11:2a:c6:
         fb:11:9e:6e:fa:4e:9a:ef:a6:04:72:63:13:07:0e:68:01:61:
         7e:49:81:4b:20:f5:f2:92:f0:70:13:83:b8:aa:70:94:98:9a:
         71:a0:1b:ee:fc:bb:a5:99:30:7e:4c:d6:91:d3:01:68:2e:7b:
         f3:37:7a:7f:39:62:35:fb:0e:fe:a6:33:c6:58:96:84:b9:24:
         78:65:cd:0a:94:cd:52:86:d7:8f:75:d4:44:21:f7:7f:63:99:
         23:c8:3e:7c:d2:8b:7f:7f:b5:d1:fd:70:e1:56:be:35:3f:35:
         f6:06:bf:22:b2:37:65:9f:e0:c8:d7:7c:55:98:3f:9e:df:bd:
         b4:dd:6b:16:76:87:53:f1:9f:2a:98:a9:75:3d:49:b4:74:b0:
         88:3b:fd:a9:a5:8b:f6:d5:7c:ad:34:19:1e:ad:c7:0d:98:88:
         7c:da:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:32:15 2025 by rpki-client