Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa
File:                     31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa (raw, json)
Hash identifier:          CTR9UqVLWAHOB/jR8V133COglQBzaNHd0ayRWZk0EmY=
Subject key identifier:   A1:44:3B:71:B5:3E:1A:09:1E:26:AA:E3:FC:D1:07:7B:1A:5B:1F:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A62840D1D255F3FF155CD30E8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa
Signing time:             Wed 02 Jul 2025 12:36:03 +0000
ROA not before:           Wed 02 Jul 2025 12:36:03 +0000
ROA not after:            Tue 30 Sep 2025 12:36:03 +0000
asID:                     396581
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:0d:1d:25:5f:3f:f1:55:cd:30:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:03 2025 GMT
            Not After : Sep 30 12:36:03 2025 GMT
        Subject: CN=c918146e-c7ed-487c-99b0-3772d393e9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:08:4b:7f:fe:6a:f6:70:dc:af:92:cf:b5:
                    ed:72:35:e1:ca:df:36:e4:7f:88:9f:43:79:71:c8:
                    6d:75:f1:3c:02:b6:5a:eb:e0:8b:b3:c3:47:08:c1:
                    3f:34:50:ed:0a:68:cc:4e:08:87:05:62:d5:c4:00:
                    c7:f6:de:37:9c:fd:bf:30:ed:41:d5:a2:53:ae:a0:
                    0e:bf:b6:8f:48:07:c9:d5:19:98:98:3a:75:8b:ff:
                    04:72:b9:69:8c:e3:fa:b2:c4:99:64:8c:0b:3d:0d:
                    ed:bf:e1:85:d5:55:0b:70:02:b2:c6:88:10:f2:56:
                    9f:dc:0c:0e:94:91:ef:ba:40:8e:3a:16:26:de:dd:
                    03:3c:eb:e8:4b:8a:03:3a:32:b0:e1:74:65:26:11:
                    ef:8b:3d:78:b3:07:6f:a5:f4:bd:c3:23:82:46:4a:
                    f8:c9:4b:f0:b0:90:41:75:9e:e9:2f:08:3d:34:25:
                    db:76:0f:3d:a3:e4:09:d6:9c:69:d1:55:31:f3:cc:
                    42:9b:6f:a3:1b:31:3c:0f:33:9c:31:af:57:bf:c8:
                    0a:54:ed:79:29:e9:71:10:4c:33:9b:d3:2f:8b:5b:
                    55:d8:61:ab:28:28:14:3f:54:11:15:6c:61:1e:38:
                    ad:a2:be:5b:a8:bd:6d:d4:1b:d7:81:2f:85:67:10:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:44:3B:71:B5:3E:1A:09:1E:26:AA:E3:FC:D1:07:7B:1A:5B:1F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:e0:76:a5:68:8e:7f:11:15:30:b8:ab:fc:13:14:e3:b9:
         6a:4d:4e:34:59:2d:8a:f0:14:c7:f4:c1:2c:6c:d3:da:f1:9f:
         33:aa:d2:e7:34:eb:e2:94:84:1f:b9:32:85:41:76:0f:f2:18:
         43:ec:13:26:5d:a4:86:5b:bc:26:07:84:3b:cf:3e:d8:a7:09:
         dd:13:11:4d:2a:84:f4:5b:26:29:37:c9:25:f9:4d:f2:53:3a:
         50:1f:2d:19:c3:82:8e:53:2a:b0:a4:c2:65:8f:35:b1:cf:db:
         5f:51:c7:f4:73:24:87:c3:ef:51:d2:78:5e:1e:b3:6d:0b:b3:
         c0:e4:f5:6f:3f:b0:60:23:f2:05:96:d9:e3:da:c6:57:ea:c7:
         87:ea:1b:fc:bd:b0:2b:cb:04:e9:80:ff:c6:fc:fa:d9:39:f1:
         ad:a6:42:fd:4d:b5:bd:13:1e:e8:3c:41:99:f9:52:2c:a1:43:
         55:16:e3:5b:08:6c:16:36:d6:36:75:c9:af:3c:0f:b5:19:b0:
         48:98:36:75:34:8b:ab:89:8a:24:a1:b8:f4:95:cd:ab:7c:05:
         d6:3a:a6:9f:4b:4e:77:21:84:c5:50:9e:9c:df:b0:ec:f2:01:
         60:7a:f0:f3:b2:ae:2d:7c:0b:8c:7a:f7:3c:b1:ce:c2:1d:8f:
         42:61:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:37:39 2025 by rpki-client