Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f63a78b0-0176-358a-8dd9-ad11798127ad.roa
File:                     f63a78b0-0176-358a-8dd9-ad11798127ad.roa (raw, json)
Hash identifier:          ATPRGPosXXlltMDem4c7+CcpUNESu7MR2UvEO1jyZvM=
Subject key identifier:   24:BB:48:FA:DE:EB:F7:28:B7:3A:1B:C1:F6:1C:50:24:B2:B9:00:23
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A662848E61A336EC21C56C7C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f63a78b0-0176-358a-8dd9-ad11798127ad.roa
Signing time:             Thu 03 Jul 2025 19:54:23 +0000
ROA not before:           Thu 03 Jul 2025 19:54:23 +0000
ROA not after:            Wed 01 Oct 2025 19:54:23 +0000
asID:                     7843
IP address blocks:        128.121.64.0/18 maxlen: 24
                          128.241.128.0/18 maxlen: 24
                          131.103.192.0/18 maxlen: 24
                          157.238.0.0/18 maxlen: 24
                          168.143.0.0/18 maxlen: 24
                          192.204.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:28:48:e6:1a:33:6e:c2:1c:56:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  3 19:54:23 2025 GMT
            Not After : Oct  1 19:54:23 2025 GMT
        Subject: CN=1d6d4e1b-da21-4d09-8be7-52d5fe3216cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:7f:10:b8:e0:b0:eb:e7:84:bf:aa:89:db:
                    5c:bc:eb:4a:e4:c6:d1:5d:7a:bd:07:83:d0:6f:8a:
                    bb:10:74:9b:fb:05:49:e1:74:bc:cd:8e:f2:a2:0a:
                    2e:e2:99:ad:cc:0d:fa:f8:7a:8d:17:b8:bc:c1:12:
                    33:7e:2a:57:cb:92:40:01:6b:3e:7b:68:93:c1:6d:
                    a6:79:b8:75:82:26:37:83:da:7a:98:a4:64:c2:77:
                    00:cb:f0:2b:ae:b8:06:54:df:5f:9b:e8:25:bd:f5:
                    ce:4c:f3:3b:05:50:2b:c6:af:13:75:ce:76:74:2a:
                    d5:a2:30:74:15:67:8a:f0:c3:1e:aa:b9:15:25:3b:
                    f0:7e:72:52:af:b1:2a:50:d8:47:8c:27:05:c9:98:
                    39:e2:7d:1c:02:cc:fd:25:63:e4:90:87:af:08:f7:
                    93:a8:4a:bd:b4:e2:c7:68:db:35:8d:4a:d8:05:70:
                    3a:d8:a2:3b:5f:ac:0f:91:5c:0c:9b:9b:58:4e:09:
                    1a:1c:27:fd:06:9c:d8:85:d9:e5:85:98:93:4f:52:
                    a8:1b:c1:04:b0:79:40:9d:fb:5d:c7:81:26:46:bc:
                    26:b2:59:a8:ac:55:44:ef:51:13:9c:a2:c5:68:2e:
                    62:3b:b8:47:e9:69:ec:e7:54:82:b4:58:e6:06:f8:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:48:FA:DE:EB:F7:28:B7:3A:1B:C1:F6:1C:50:24:B2:B9:00:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f63a78b0-0176-358a-8dd9-ad11798127ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.64.0/18
                  128.241.128.0/18
                  131.103.192.0/18
                  157.238.0.0/18
                  168.143.0.0/18
                  192.204.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:20:0d:a0:c9:4b:76:ce:07:6e:bc:05:b0:56:1c:e0:df:
         f2:5e:47:57:d9:cd:a3:0a:ab:cf:d0:b9:78:9e:8e:16:dd:6e:
         bf:25:93:9c:37:27:d6:9f:bc:fe:e4:9f:1f:83:11:cb:fc:d7:
         d4:2d:b6:40:0f:7b:a1:fe:39:c9:1a:ed:a7:fd:62:a5:54:8f:
         61:7d:71:d3:86:2d:65:1d:74:be:6e:ac:3a:61:84:5a:be:07:
         31:ba:ef:31:91:ea:47:42:65:88:a3:56:75:20:81:e9:20:58:
         ee:d8:54:a1:99:16:e7:5f:ee:bb:b8:5a:82:80:54:64:1a:4c:
         c4:ae:df:ff:fc:58:5d:35:cd:ab:46:7d:7b:4e:de:94:64:a9:
         24:d1:84:5e:9e:e0:44:df:12:16:1c:f2:25:b0:b0:2c:29:34:
         09:6c:b0:14:76:0e:69:32:c8:9d:48:ca:5b:f9:22:48:95:43:
         19:cb:4f:21:ea:a8:0f:92:36:6c:37:1e:78:17:c5:32:3a:ad:
         5b:29:5e:43:19:16:fa:ff:d7:44:c0:84:45:ca:3c:cf:32:b0:
         1a:25:79:38:63:a5:bb:a9:ee:2d:46:32:16:3d:8b:30:9f:81:
         b6:7c:3b:b7:8f:f8:b8:4f:24:dd:70:d2:2c:53:54:76:d2:64:
         31:06:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:25:42 2025 by rpki-client