Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efb7589e-863f-30d6-9ffb-8d793cde0531.roa
File:                     efb7589e-863f-30d6-9ffb-8d793cde0531.roa (raw, json)
Hash identifier:          AxcJMLUCoRdJhkKcaOMv6KWpkGp+6hEmhpydFFAOqws=
Subject key identifier:   EF:4A:54:70:25:B3:61:49:AE:9C:7F:F0:DB:15:96:FC:8C:3B:7E:A7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A628411795750478966767C60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efb7589e-863f-30d6-9ffb-8d793cde0531.roa
Signing time:             Wed 02 Jul 2025 12:36:05 +0000
ROA not before:           Wed 02 Jul 2025 12:36:05 +0000
ROA not after:            Tue 30 Sep 2025 12:36:05 +0000
asID:                     25485
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:11:79:57:50:47:89:66:76:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:05 2025 GMT
            Not After : Sep 30 12:36:05 2025 GMT
        Subject: CN=267b0c5c-3ed2-47a6-987a-85de254cec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:de:44:96:44:da:2a:a7:38:46:af:59:e5:
                    d8:6c:28:e8:cc:e6:9a:c2:e5:6b:64:2d:c1:18:c0:
                    fd:07:bf:64:9d:e9:a6:07:c4:db:87:e8:b5:b8:e4:
                    11:9b:84:68:aa:0c:5b:5e:cd:c8:72:d6:61:6f:fc:
                    30:68:ca:70:87:9b:30:9d:14:5d:b4:5c:1f:5f:cc:
                    61:78:d1:14:fb:ee:93:c9:8c:1c:59:87:1d:4b:37:
                    79:8f:3f:a9:ec:8a:8d:ff:0c:6c:7f:5d:b4:bb:2a:
                    5b:27:67:00:15:e5:4e:5a:11:67:c5:50:67:2f:65:
                    24:e6:b1:98:c1:e0:68:fe:f7:a8:92:db:3a:56:e3:
                    72:a9:c1:ee:0e:48:1f:45:02:fa:6f:b3:08:11:4e:
                    0d:a1:83:e2:ae:b6:b3:e9:5b:b6:f2:c1:b8:37:28:
                    ec:68:d8:4e:a2:af:11:04:31:5a:f7:1a:d8:72:58:
                    37:93:0b:37:7f:c6:89:56:90:63:03:bc:ea:0f:9e:
                    4d:01:c8:13:99:ab:7b:f8:6f:30:62:ec:6d:1f:ec:
                    8f:61:25:5f:56:02:11:56:b6:a4:3a:b0:ab:56:5f:
                    f0:0b:74:4f:92:94:5c:72:a9:db:8f:13:1e:07:94:
                    97:8a:d3:a8:0b:5f:c1:60:40:c5:3d:56:a8:b5:b6:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4A:54:70:25:B3:61:49:AE:9C:7F:F0:DB:15:96:FC:8C:3B:7E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efb7589e-863f-30d6-9ffb-8d793cde0531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:29:ca:af:1b:97:04:01:64:df:53:44:6b:1e:0b:69:dc:
         dd:84:18:86:70:a1:0f:69:18:61:7e:ef:bb:eb:b2:4e:d2:b1:
         e9:6f:ca:12:50:80:d1:41:3a:c8:c9:92:1d:fc:1a:12:6e:2b:
         59:1c:9f:7b:5b:be:76:5e:cf:97:73:2a:e9:53:0f:ec:1e:f9:
         72:8e:d5:7d:4b:e2:63:31:d0:b7:63:0c:e6:63:ff:c3:62:c0:
         79:16:02:e6:29:ea:ac:03:f9:cf:e1:a6:b1:e8:61:1b:d4:44:
         f1:13:5f:82:99:ab:c9:1e:e1:06:34:10:92:00:a5:9f:46:62:
         41:de:63:c3:dc:5f:a0:b6:d5:6f:36:76:a7:b8:74:44:e2:7c:
         4d:c8:5b:7f:c5:9a:c2:f0:f6:38:10:80:7f:86:dc:fd:be:14:
         43:06:15:63:0b:9b:d3:53:d9:8f:df:22:cd:0c:63:5f:c1:3d:
         61:24:02:e9:5c:20:60:84:4b:50:dd:2a:c9:26:e7:46:9d:76:
         df:0a:55:16:32:a9:09:f0:96:9d:fd:ac:04:f2:c9:4a:a2:18:
         31:07:48:9c:ec:88:57:5e:fb:76:a7:3b:5b:23:0c:a4:e4:c2:
         2c:e1:cc:c8:57:79:1c:eb:c2:70:3b:8c:c7:98:d2:7e:82:74:
         6f:03:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:41:44 2025 by rpki-client