Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa
File:                     6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa (raw, json)
Hash identifier:          Lg1sfzeoD7fhi8CNktCx4QNr7TM2Zm/vyAULskPXNYA=
Subject key identifier:   2F:26:AE:6B:23:7A:5C:4B:9B:EE:E7:72:95:52:51:5A:29:44:BF:60
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584B0746C0D31FF2165361F4DCA0
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     11248
IP address blocks:        204.8.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c0:d3:1f:f2:16:53:61:f4:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=04168680-9cdb-4292-a18a-186b48e208f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:30:92:35:45:72:f6:cf:86:5b:df:7e:3b:
                    dd:1f:3c:a8:e2:50:0f:24:ef:1e:2c:5c:3b:75:3b:
                    1d:94:93:f2:69:f4:35:9e:8d:49:f7:cc:a4:a8:c5:
                    e2:8f:70:11:3e:e6:48:f3:fe:a3:2c:1d:b1:d0:ba:
                    80:24:08:fa:80:92:11:01:f7:b1:f4:75:20:c8:75:
                    9c:f2:3c:76:80:33:94:e4:72:88:81:16:3b:5b:77:
                    66:b9:1e:cf:f2:a6:18:e7:a1:e4:9a:b6:17:d2:d0:
                    0d:3e:4b:c6:0d:43:21:72:15:3d:92:ae:83:4a:cb:
                    7a:7e:7f:1b:9d:00:19:05:34:84:1b:e3:68:b7:f5:
                    2b:70:3a:81:ff:f0:72:e3:2c:c5:09:34:94:73:de:
                    cd:ec:aa:fe:cf:85:74:47:25:89:95:b8:ac:37:77:
                    75:77:59:c8:c2:c6:9d:e5:45:c1:90:d0:ea:52:cc:
                    22:5a:c6:6f:2d:49:d4:e8:63:3d:77:1b:6c:20:52:
                    3b:2f:b5:aa:fc:17:29:b3:c5:68:14:f4:df:45:f5:
                    1e:bf:d4:12:e1:c4:8d:78:76:fb:59:29:f2:40:81:
                    01:26:97:b2:8d:6d:a6:fb:68:b9:de:02:a7:02:c3:
                    34:3d:32:c3:4e:b0:f7:2c:65:cd:03:75:00:87:b1:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:AE:6B:23:7A:5C:4B:9B:EE:E7:72:95:52:51:5A:29:44:BF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:db:a8:07:a5:a5:44:14:79:27:a2:c9:4a:ec:1b:e3:30:
         d0:b3:ff:5c:26:53:cd:7a:7f:50:80:66:9e:fc:a3:e2:c5:6c:
         11:98:19:76:c1:6b:25:7e:e4:90:53:e5:c5:23:21:c2:05:fc:
         af:c6:d6:3f:78:aa:2b:d4:85:20:16:d6:f3:05:03:95:4c:3e:
         7f:bc:d1:f8:47:e2:98:ce:91:b0:90:4f:66:5a:37:18:ca:29:
         0a:a4:40:19:92:fe:c0:e8:9a:95:a6:3a:81:f5:76:36:ec:89:
         5d:cb:fc:f8:4d:c8:37:6a:32:b0:b7:b9:f5:e6:97:c7:b2:c9:
         8e:1c:7e:03:d0:8a:d3:e9:de:72:cf:d4:92:ff:47:98:83:35:
         f4:e3:8f:01:09:bb:44:17:33:49:d4:fa:ab:83:11:3c:8b:8e:
         f0:3e:29:0d:fc:d6:f6:aa:34:20:8a:65:11:dc:41:35:4c:0a:
         08:0e:48:1c:e8:b4:cb:3c:3c:ca:a5:d8:89:3c:5e:65:c3:0a:
         98:29:cc:73:ae:62:eb:39:2a:bf:fb:8b:03:97:5f:7a:f9:b5:
         af:f6:6e:26:38:fa:0a:f5:f2:98:0d:d6:f8:49:61:c9:53:92:
         90:ee:a6:b5:34:d1:46:9f:c5:f9:85:bb:dd:49:26:be:a3:84:
         d9:40:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:43 2025 by rpki-client