Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa
File:                     a51333c0-b920-37c3-ac71-0834c73fd5c3.roa (raw, json)
Hash identifier:          x5i2iG0o9gRzMu9DfOnhx0NR66yymrVgzTfxNj15+g4=
Subject key identifier:   51:D6:8E:99:09:A4:8E:37:18:B2:7F:47:60:DA:74:68:E5:2F:C1:52
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A6284103CBF96768BFFACBD90
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa
Signing time:             Wed 02 Jul 2025 12:36:04 +0000
ROA not before:           Wed 02 Jul 2025 12:36:04 +0000
ROA not after:            Tue 30 Sep 2025 12:36:04 +0000
asID:                     396590
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:10:3c:bf:96:76:8b:ff:ac:bd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:04 2025 GMT
            Not After : Sep 30 12:36:04 2025 GMT
        Subject: CN=11c6e922-24d6-49a8-bdf2-064187905e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:1a:3c:5a:33:c7:b8:3f:3c:9b:95:e0:05:
                    e4:25:59:39:0e:b3:5b:7e:5b:6c:da:5f:dd:74:8d:
                    8f:c2:fa:7e:d7:f9:f3:d1:b4:0b:8a:a5:98:b4:b0:
                    02:89:81:6a:b5:f4:0a:28:49:52:fc:4f:47:79:8f:
                    f3:a1:bd:19:53:6b:0d:ef:77:4a:2e:84:9f:f9:50:
                    94:d4:28:e1:4f:36:19:9b:49:67:76:ce:f2:f6:3b:
                    0f:40:68:f0:b2:98:07:81:3c:8a:5d:b9:17:f2:ee:
                    2a:f8:2f:63:e4:3c:17:64:e7:38:ad:fd:cf:e8:82:
                    21:1f:63:ea:73:43:ab:84:b5:41:a8:30:64:24:2e:
                    57:1b:fb:ff:01:78:73:a8:30:87:17:e0:a6:3f:57:
                    94:5a:b0:ec:d6:6b:51:40:1c:ac:60:4c:38:eb:9c:
                    81:44:4c:0b:87:9a:31:69:bc:b9:64:47:a2:1f:fe:
                    0a:99:33:f8:32:3e:23:51:9b:0e:b4:ee:c4:bb:b2:
                    39:06:c9:84:a0:9c:be:7a:87:91:4c:9f:bb:c0:3a:
                    48:5a:87:f3:14:fc:7b:50:9e:2f:de:ad:72:e4:cd:
                    65:e9:b6:f1:ab:01:c9:db:23:54:9f:a1:c2:f1:ba:
                    41:8c:1d:03:cf:74:47:e2:64:e1:0f:1a:25:64:5e:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D6:8E:99:09:A4:8E:37:18:B2:7F:47:60:DA:74:68:E5:2F:C1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:62:ea:f1:59:b8:c9:f4:c2:9a:1a:b1:33:ae:6e:54:41:
         99:16:16:da:06:ad:78:fb:23:b2:e2:bd:f8:3c:99:62:c8:76:
         64:7e:eb:e8:9b:ce:20:a8:d5:ef:2f:77:cf:1d:fe:ef:0e:4e:
         3e:6c:e9:0e:4d:18:64:95:47:b7:c3:03:d5:fa:bd:6c:76:ef:
         ec:62:71:f8:1d:95:2b:89:63:f6:7b:60:47:7f:80:c7:cb:ea:
         c7:7a:00:de:2f:67:91:19:47:78:90:33:e6:da:c7:34:25:d9:
         c1:31:9e:6b:b3:30:4d:6e:26:7f:a8:41:f6:9b:52:a0:29:ff:
         74:bb:87:e4:d1:39:26:31:e6:49:c6:71:33:22:d6:87:43:aa:
         06:99:85:38:2e:3d:96:01:51:d5:cf:d2:df:93:0c:6c:e9:ee:
         7b:52:8d:f3:43:7b:e1:b9:60:d7:f5:3a:54:fc:d6:79:90:76:
         21:c5:37:dd:12:b9:d8:78:3f:1c:cb:00:e4:95:c7:ae:23:7c:
         7c:42:f1:d9:dd:71:0d:99:2a:7b:54:27:b9:34:0d:8b:46:ff:
         71:08:b6:0b:d9:88:eb:8a:fc:b2:4e:4d:7b:ec:e5:0e:da:7c:
         4a:17:be:6a:b9:b9:59:90:7c:c7:78:52:6e:9b:0c:7f:b2:3a:
         db:b1:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:35 2025 by rpki-client