Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7589bb4b-6782-3bb6-9f27-920907204ffc.roa
File:                     7589bb4b-6782-3bb6-9f27-920907204ffc.roa (raw, json)
Hash identifier:          wTzhltY0mFL2hX75qheB4Q2TDpDQSdt6rxqysDLiLwg=
Subject key identifier:   81:D7:08:A4:55:0D:A8:C3:3A:07:1C:09:D5:B4:C9:98:84:72:ED:D7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A81464084FE00D2239DDD13AC
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7589bb4b-6782-3bb6-9f27-920907204ffc.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        141.164.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:40:84:fe:00:d2:23:9d:dd:13:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=f3f77651-e99e-4ef9-9104-8d184eeac1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:9c:59:9e:45:4b:b6:5f:40:47:be:e0:1e:
                    0b:e2:ff:60:01:00:f9:de:61:3c:f0:2e:a6:6c:ff:
                    a8:c0:0e:67:f0:5d:dd:e9:d0:67:72:42:85:cc:8b:
                    df:10:81:d8:fe:54:5b:d7:9a:76:dc:ff:47:5e:e7:
                    49:e6:1d:1a:26:fa:57:2c:eb:e4:73:78:df:0b:61:
                    5a:e8:63:19:d3:e9:7c:b9:8c:35:cc:6e:94:87:8f:
                    fd:55:a2:df:91:c1:22:87:62:cd:72:f1:e0:a8:3b:
                    67:07:a5:e0:01:f3:d9:df:3c:91:f3:f7:a2:bd:75:
                    38:73:72:86:c2:72:e9:4e:93:00:70:6a:d4:4c:a4:
                    14:fe:b6:fc:f9:c0:85:30:b8:19:38:47:b3:a5:c1:
                    0a:9c:f5:7d:79:40:ce:5d:f9:96:50:c3:b9:76:d9:
                    e2:50:bd:55:13:12:c4:af:d0:37:16:24:6e:ee:e4:
                    13:12:c8:b6:af:3f:45:22:6f:8a:cf:68:b4:27:79:
                    9e:69:ff:cc:12:9a:8c:59:90:fc:9c:dc:98:f4:6b:
                    1c:e6:5c:8d:75:ae:a1:db:a2:30:0b:57:bb:fc:2e:
                    cb:bf:44:dc:1e:5a:32:9e:78:82:23:ca:00:28:ff:
                    ca:95:a5:b8:b2:8c:b9:ef:00:20:3f:b5:e5:32:2c:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:08:A4:55:0D:A8:C3:3A:07:1C:09:D5:B4:C9:98:84:72:ED:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7589bb4b-6782-3bb6-9f27-920907204ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:b1:b6:b1:3b:4f:0c:35:fd:f5:69:ab:d2:65:45:78:99:75:
         d6:9d:4c:9e:22:37:39:b0:e3:e3:ac:78:4e:03:55:73:f5:46:
         46:0a:b6:ac:35:3d:37:73:a9:d1:44:c4:02:44:6b:b6:29:11:
         d5:93:c1:0f:ce:9f:28:4d:3c:d6:d7:7f:3f:59:2c:2e:36:13:
         b4:c8:d9:aa:a8:0c:11:a9:4a:c3:58:bc:e0:d8:78:e0:c4:88:
         d8:e6:c3:47:0a:6d:f1:21:ce:07:c3:80:63:01:af:10:22:f6:
         c7:58:f3:74:9a:0d:fb:2b:e5:10:f4:3d:89:e0:52:01:8a:16:
         2c:9e:dd:fa:c6:99:f6:1c:92:4b:dc:7e:6c:51:c6:9f:9e:e2:
         19:0f:d9:12:d4:9d:dd:f5:03:11:e7:6e:62:88:0a:7d:6f:f4:
         f0:46:97:58:a1:7e:5f:05:e8:0c:ea:e5:04:88:4f:ca:c9:47:
         48:85:87:79:35:38:b8:97:50:e7:f0:6e:50:57:ba:1a:f7:1a:
         94:b0:22:56:3a:56:02:e3:dd:32:7b:05:97:6d:a9:ef:a3:0b:
         28:57:35:f4:70:84:49:ff:26:eb:0e:70:ce:52:fb:32:ba:9d:
         8f:a1:c7:ff:38:26:36:af:b1:55:56:ce:21:e8:ea:81:9a:ce:
         7c:26:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:27 2025 by rpki-client