Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
File:                     30baad33-ed81-3ee8-9ad8-d03d892b9187.roa (raw, json)
Hash identifier:          q6bZvqpu1aHrxBNLlHW28eVH2f1QLK5mgCc083jWv5M=
Subject key identifier:   10:8C:B1:F0:EE:16:71:31:58:61:C9:E9:40:13:F2:D7:27:0C:2E:08
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3714DD4704EC2F2A6500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        142.169.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:37:14:dd:47:04:ec:2f:2a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=bf34f26d-6100-43e3-9f99-dc37b192e368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:de:21:a9:5e:c4:df:f2:6d:be:50:27:66:
                    28:21:eb:7c:73:94:48:69:28:e8:1d:f4:62:0f:40:
                    4b:3f:56:1b:50:b3:9f:9c:5a:eb:66:6f:79:f7:e7:
                    fa:0e:bb:38:29:0c:94:f3:06:dd:8c:44:ea:11:26:
                    2e:01:d4:ec:72:c0:a6:ab:fe:e9:c8:1c:34:9f:33:
                    d2:b4:ff:4f:4a:15:82:01:20:34:32:e0:1d:15:28:
                    1b:d3:aa:a1:92:a4:23:27:92:60:07:55:2a:42:75:
                    09:f6:ee:97:e7:77:9f:34:16:b9:5f:26:4f:b8:e2:
                    ac:e5:c1:4d:ee:37:f6:5e:b1:1a:96:9b:b9:29:df:
                    bd:5f:a6:9c:5e:b2:90:5b:5f:d6:df:e4:54:27:ae:
                    57:9d:15:bb:60:3f:60:a8:e6:e5:af:e0:8b:77:e9:
                    e2:0f:a2:a2:7a:db:21:6f:8c:f8:3b:fd:4f:bf:f5:
                    5c:48:e7:5f:d3:e8:b1:5e:83:10:e8:41:c1:bf:fb:
                    78:81:4d:b1:38:72:a9:e0:ff:1f:3b:1b:9b:d7:b6:
                    36:ee:89:bd:37:4b:83:70:50:dd:dc:2d:82:f9:b1:
                    af:c6:10:a2:52:02:43:79:b5:b6:15:e9:e0:7b:e1:
                    40:b9:f8:78:a6:cb:33:55:cc:ec:58:bc:79:a8:2f:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:B1:F0:EE:16:71:31:58:61:C9:E9:40:13:F2:D7:27:0C:2E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.169.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:76:1a:7c:3e:6c:7f:9e:ec:12:b1:5d:dd:16:cf:ce:7b:96:
         b7:a6:06:a6:df:8e:18:52:c2:b7:6f:01:17:e6:bb:5f:df:11:
         bc:b3:db:d6:d1:9d:be:16:5c:f1:02:15:81:71:4b:6b:1a:7c:
         f4:bc:e1:95:cd:2c:cd:09:55:a8:a5:02:5a:f7:8c:88:b2:fb:
         c8:98:ad:25:10:03:e6:cd:ee:23:9c:93:72:30:52:db:c2:c9:
         52:1b:61:50:14:ba:c8:a0:3e:4a:c9:1f:c0:10:f7:95:a6:5b:
         54:0a:5a:23:6c:5d:e2:e1:f7:a9:d1:1f:8e:c0:79:94:77:9a:
         7d:a4:bb:7c:08:f8:0b:33:40:15:4c:64:80:a6:91:6b:0f:b8:
         77:5f:78:98:4d:12:e6:af:e0:35:be:04:80:cf:ea:c0:e1:b7:
         dd:48:81:f7:e9:88:00:e8:a5:00:f0:0d:19:d4:b4:2a:f5:07:
         f8:71:87:83:0a:45:f1:56:96:f5:34:0e:27:63:99:81:28:64:
         54:de:68:d2:1a:d6:73:75:60:c0:8d:32:5e:e8:f1:d2:fe:a2:
         c3:58:e5:74:1c:64:12:63:9d:fa:85:4c:d5:f8:f8:10:a9:f5:
         fd:8f:59:e6:c8:b7:79:4e:17:15:d9:2b:f5:d8:98:78:8e:23:
         3f:c0:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:28:47 2025 by rpki-client