Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa
File:                     f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa (raw, json)
Hash identifier:          ToiPTqud2cQsplywuoh8eDqVxvIa4Vu0cpATmx+Wvpk=
Subject key identifier:   43:D0:AC:8B:C2:3B:06:B2:69:04:94:1F:61:BC:03:3B:79:C6:FC:FC
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584A7E7B5A48CEE1B27544B45F80
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     51964
IP address blocks:        141.188.96.0/21 maxlen: 24
                          192.25.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5a:48:ce:e1:b2:75:44:b4:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=3e0f020e-81ee-4eaf-9ed7-b3541df66f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:c5:bf:2c:64:56:76:e9:f3:70:21:86:f8:
                    5b:5e:0d:93:a1:e9:26:d1:43:c1:5f:0b:1b:45:3e:
                    b9:9c:8e:6d:21:c5:a5:bf:1c:3f:29:d5:1b:5f:e8:
                    25:17:e3:76:9d:f2:e7:52:3a:a3:11:b5:a5:cf:d1:
                    9f:fe:6c:e5:cc:68:45:f4:5e:d4:10:d7:05:7c:1b:
                    d6:5e:0d:dd:0f:63:27:ce:81:bf:98:f4:02:5e:9b:
                    b4:54:db:9a:3e:2a:35:4e:8b:da:0b:c9:51:44:85:
                    3d:da:37:2f:40:d8:fd:38:ff:42:ac:39:95:e2:d6:
                    95:85:01:dc:f2:cd:c9:38:02:a6:d8:d9:e3:20:86:
                    5b:e5:15:09:8c:c7:a0:2d:31:4c:b3:88:fc:a1:0a:
                    6c:fa:c5:22:27:8a:a9:01:94:a4:cc:3b:a7:c5:f6:
                    7f:33:5e:2d:82:b0:d9:0f:b9:a3:a2:e1:00:a0:56:
                    d0:12:f7:4e:e8:a0:74:9f:3b:f0:06:be:39:17:73:
                    66:03:27:cc:30:19:34:cc:00:26:ba:99:a7:f4:28:
                    e0:21:3f:dd:c5:77:b8:ae:15:df:05:62:69:21:94:
                    ed:fa:d9:77:7a:a9:ef:9b:2f:fe:6c:80:4d:7e:6b:
                    67:82:b0:f6:b0:c8:ee:6f:6f:66:8e:e6:22:99:44:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:AC:8B:C2:3B:06:B2:69:04:94:1F:61:BC:03:3B:79:C6:FC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.188.96.0/21
                  192.25.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c6:fa:59:f9:25:e3:b7:30:4d:e1:36:92:e3:f2:3b:1e:5e:
         a0:d4:59:97:9e:55:ca:cc:c7:7f:48:a5:fe:f8:44:fe:91:48:
         62:b5:c3:66:61:22:db:13:cd:d7:14:2a:c9:27:01:0a:9e:8d:
         05:81:58:1d:c3:cf:0f:36:3c:01:0e:d1:b5:4f:86:15:77:7d:
         eb:72:ce:a3:20:da:c5:43:f3:6c:7e:43:6d:1e:f9:10:25:2e:
         b7:26:d1:6d:67:5f:06:af:e6:30:9e:b7:14:48:9c:c1:6b:91:
         5a:b6:16:3e:31:73:e0:71:95:d9:33:ef:b2:67:d6:9f:4a:84:
         e1:98:e4:cb:2a:18:2c:e2:1c:a3:3f:bc:1f:d1:ba:3f:30:11:
         e0:cb:ae:53:b1:2b:d0:d6:6e:b2:93:30:6c:e1:b7:65:f5:a7:
         a7:77:ee:9a:dc:43:61:1a:1c:44:3b:5a:78:f2:d7:53:d6:99:
         89:f0:17:73:6c:ff:a3:d8:b7:f0:27:69:02:b3:08:3a:41:73:
         37:53:2d:af:de:95:66:a4:ba:46:76:70:ac:2f:de:67:25:8a:
         cf:97:0e:6c:34:79:0d:89:4e:f6:36:9e:90:d7:60:89:c0:f1:
         8b:14:8d:65:fd:58:7e:bc:6f:db:7e:f6:5a:a8:b8:8d:40:d8:
         60:fb:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:53:08 2025 by rpki-client