Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa
File:                     b270954a-48c4-3971-aeb6-a89d93f59e0d.roa (raw, json)
Hash identifier:          p1L4Ct6+/TV+Ol3UC6DePbNY307k+wSQacvxIXW1D7I=
Subject key identifier:   34:46:24:95:7D:78:10:9C:93:34:DD:D5:D5:2A:42:45:37:9D:2A:7E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A8840AC9DFA790A4CA6BAD2C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     23471
IP address blocks:        199.244.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:ac:9d:fa:79:0a:4c:a6:ba:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=319f1afc-3307-461f-bc43-1de5937b4a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:3d:ca:2c:61:3a:04:07:eb:f3:5b:86:2e:
                    eb:c2:2e:25:b4:32:88:4c:6c:40:a1:8c:2f:1f:a9:
                    d0:db:db:7a:c2:00:39:f2:65:07:a1:c4:1e:f6:bd:
                    20:33:80:54:4d:02:70:ba:60:4f:a5:81:e6:6b:5a:
                    fc:1c:54:97:0e:3d:1a:82:08:0a:f9:79:f7:35:83:
                    af:40:b7:59:cd:66:01:a2:54:72:c2:51:de:a7:95:
                    77:40:60:9e:6d:4c:dd:0b:de:73:ca:3a:c7:59:08:
                    2a:92:50:65:35:6a:58:8e:5e:30:8f:e1:f6:c3:9b:
                    69:a7:44:de:62:20:5d:dc:4a:f5:32:ad:d8:24:55:
                    bf:8a:a4:fc:b2:bb:71:6a:8e:29:39:ed:3b:cb:9c:
                    18:d2:2e:5d:c5:8f:a6:cd:08:01:db:67:4c:7b:ce:
                    9b:b8:69:25:a4:da:41:02:4e:a7:ee:05:df:76:78:
                    60:52:76:54:76:70:d0:4f:df:00:e0:60:bc:2d:03:
                    25:c7:52:31:61:19:66:4c:9c:2d:7d:33:17:b5:c4:
                    ea:86:65:68:36:dd:78:6f:82:bf:65:d2:51:d8:57:
                    4c:1d:a8:43:d7:57:fa:ec:22:cf:7a:e5:79:d0:51:
                    c0:50:a2:0c:32:e6:33:a7:03:77:e0:b6:19:27:4d:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:24:95:7D:78:10:9C:93:34:DD:D5:D5:2A:42:45:37:9D:2A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:25:58:0b:a7:d9:fb:cf:8b:f9:c5:2c:13:f7:18:2c:a3:
         ed:6f:4e:75:50:fa:b5:61:96:71:9a:9d:d3:f6:89:e5:d3:0e:
         12:3a:0b:db:a2:03:80:fd:54:27:e4:49:14:09:75:17:2e:de:
         9a:fd:63:23:ac:25:b9:8e:de:a1:d0:86:7e:6d:9a:f2:7b:43:
         ab:37:36:d5:33:33:c0:24:a6:4f:dc:78:3c:0c:5d:9b:87:95:
         d3:ba:ed:5d:28:53:02:35:52:d4:d1:f6:3f:86:e9:5a:81:8b:
         47:7e:13:82:21:02:45:2e:78:6a:c0:07:15:c6:83:61:b0:4a:
         04:7e:c9:4f:fe:05:4e:0f:0a:88:14:2c:ed:fb:2a:2d:c2:8d:
         27:8e:4a:be:be:e4:bf:ac:50:48:e5:6d:b9:d1:7b:42:ef:2a:
         6a:0d:85:0e:20:37:c5:c0:a2:de:3e:6b:0e:da:01:8f:d7:99:
         93:60:1b:8f:d8:95:2c:ce:41:6b:1c:e4:69:8d:a8:1f:38:d1:
         70:a4:a2:fd:62:63:a7:c1:d4:fc:83:58:be:4f:cf:1e:81:49:
         e0:60:76:9e:6c:55:59:8d:12:d8:db:58:d7:7f:0c:bd:2a:0e:
         c0:d0:57:41:13:f9:a6:5e:4c:6f:2e:6d:61:61:83:72:df:6a:
         54:38:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 20:06:39 2025 by rpki-client