Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa
File:                     a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json)
Hash identifier:          U3Qu2Ybf2NmeOInlMIEH3jNxCEf3u3fMchEFuGfK44k=
Subject key identifier:   3F:22:B5:DD:B5:2F:CB:90:8C:98:79:73:EE:4B:2D:81:B1:DE:4D:FE
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE0967804D20E3B0F9EFA00
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     931
IP address blocks:        170.39.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:96:78:04:d2:0e:3b:0f:9e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=71cbffad-9d72-4d60-8218-2b05f8ef4522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:ae:f0:41:de:e6:23:d9:82:f8:e3:91:ad:
                    50:f4:48:cf:7d:26:d1:cd:e8:87:a5:97:23:05:7c:
                    a3:08:7c:44:b8:0f:fc:6b:0d:62:3f:61:32:d3:f1:
                    56:f6:3e:ba:ec:b8:c2:15:2c:01:cd:33:06:52:b5:
                    1b:ad:40:d1:e5:f3:19:a6:84:d6:54:bc:6f:de:d9:
                    df:6c:13:e6:68:5a:c8:c0:50:24:f5:bc:b5:31:0f:
                    cc:19:2f:b2:25:4b:14:90:57:77:eb:12:d3:4c:2a:
                    3b:ff:2e:21:d9:39:89:e0:a8:46:35:fa:21:3b:fa:
                    c8:82:31:12:3e:e1:10:d0:34:ad:86:c2:93:02:77:
                    e6:fe:b2:6e:8d:ac:d1:4b:42:d1:7e:1a:c7:a1:35:
                    c2:b3:b3:8b:b2:c2:ac:f2:53:91:d4:39:00:cf:63:
                    81:31:ea:e3:4b:40:5a:2d:01:c8:8e:d3:00:1b:f2:
                    d5:68:d5:8e:2a:eb:c7:d5:8b:39:b4:71:05:da:bd:
                    38:09:98:27:e3:7d:6e:8c:cd:f5:2f:9b:44:c6:d6:
                    35:af:7e:b1:ce:46:10:33:4b:d0:4c:26:9f:eb:0a:
                    7d:b5:1e:07:a1:3a:32:4f:93:ac:82:68:3c:1d:f2:
                    1a:3f:59:1c:95:dd:22:38:4d:36:1f:4a:5e:32:63:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:B5:DD:B5:2F:CB:90:8C:98:79:73:EE:4B:2D:81:B1:DE:4D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:54:ee:ac:81:85:25:10:5a:5b:a3:1e:a3:3c:dc:0b:a2:
         28:49:4a:18:ab:6e:92:33:b3:93:79:f7:12:ea:23:01:98:16:
         07:dc:34:f6:55:98:53:74:fd:b0:c8:fa:88:09:49:75:2c:fb:
         42:fe:54:fe:b2:e3:1d:f4:89:c2:de:b7:16:df:79:06:2f:61:
         e4:cd:d2:aa:88:ab:fd:95:81:43:97:fa:22:b1:a8:d8:f7:be:
         a8:0b:f9:09:2b:f3:76:b7:ad:8f:6b:ad:0f:3b:7d:9a:1d:a3:
         10:6d:00:0a:ad:c8:47:bc:ee:16:81:13:74:c1:10:f5:2f:e6:
         a8:a1:58:8b:39:b1:37:1e:71:8d:85:d2:ef:05:be:06:76:47:
         0c:7e:61:26:b5:e5:21:93:d7:2f:f6:e6:91:bb:9c:ca:c9:1d:
         5c:0f:c8:20:a9:d8:cb:54:d6:34:6d:57:aa:88:11:d5:ac:42:
         3f:0a:c1:49:d4:cb:ea:6b:d7:98:16:57:d3:a0:f0:bc:8b:be:
         d8:24:50:50:db:40:4f:39:57:e0:66:f9:98:ab:8a:df:1d:5d:
         01:07:f2:0f:32:4f:6a:81:ef:9d:7d:67:b5:c1:c4:67:ee:b6:
         c4:73:06:90:d3:34:48:3f:94:c8:54:13:17:ee:4b:13:05:3f:
         d4:80:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:16 2025 by rpki-client