Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/75cfa6f9-9752-3065-905d-cf5f1fc17411.roa
File:                     75cfa6f9-9752-3065-905d-cf5f1fc17411.roa (raw, json)
Hash identifier:          gDct5Rk86mJTEZFSE/Kj61E7a3gdkwojvScSS+EVByI=
Subject key identifier:   1D:1B:29:AD:2F:C2:FE:C5:7F:A1:00:64:E1:D1:AA:67:0B:32:19:AE
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584A9D30D6353C19A7D2D5C29E80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/75cfa6f9-9752-3065-905d-cf5f1fc17411.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     13213
IP address blocks:        174.127.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:d6:35:3c:19:a7:d2:d5:c2:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=27b0c23f-eb79-407b-9eb7-f37c6ec085d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:df:d4:85:2d:66:c2:0f:45:8c:36:07:13:
                    36:b6:32:7c:fd:af:8b:e2:7b:d0:18:4a:a4:34:56:
                    b4:d3:a6:77:59:dd:01:cb:86:7c:81:d5:58:2c:3e:
                    c2:70:4f:a0:99:5a:71:17:e7:9d:de:3f:56:98:62:
                    50:6f:b1:88:30:c0:2f:e3:3f:55:58:c8:47:74:f3:
                    78:2b:79:97:fa:3f:da:32:07:d7:15:04:4d:f1:ad:
                    fb:00:4c:f9:ec:90:e8:01:20:c3:82:f2:80:cb:be:
                    ee:a6:2b:7f:0c:39:20:fc:06:e9:dc:03:fb:ba:0e:
                    f4:24:aa:b1:79:80:38:20:3f:45:ce:40:fd:d9:30:
                    c2:3c:fa:fc:a6:92:a3:db:e9:e1:ad:90:b7:93:b6:
                    6f:86:59:d2:fe:ce:8d:ee:f9:ff:4b:9d:29:27:b9:
                    8e:60:53:dc:cd:96:18:1b:db:47:39:2d:e9:89:8b:
                    ca:9f:c7:49:88:ed:31:17:6d:f2:31:6b:23:fd:30:
                    28:2b:bb:38:97:00:c7:02:28:f0:d5:1d:23:5d:e2:
                    83:eb:8b:5f:ad:16:58:5f:f1:7e:44:72:e2:96:03:
                    44:ef:e1:a2:29:e9:a0:d6:44:a5:af:8b:43:23:ca:
                    dd:00:ba:ef:8c:ba:79:70:69:3c:71:2c:29:bc:84:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:29:AD:2F:C2:FE:C5:7F:A1:00:64:E1:D1:AA:67:0B:32:19:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/75cfa6f9-9752-3065-905d-cf5f1fc17411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:d1:e4:24:ed:a6:cf:e7:9c:c5:57:d4:cd:88:02:a4:cc:
         a2:31:b5:eb:d4:bf:f7:0e:2f:c8:46:96:21:22:32:c8:0e:f7:
         8e:3a:91:fe:ab:6b:68:d6:8e:8a:52:cb:50:6f:d2:ea:1f:a9:
         82:5f:ae:f3:0c:68:e0:92:77:94:57:c0:ac:d5:70:65:18:00:
         04:9e:fe:91:ae:36:30:91:4f:22:b8:ae:f5:98:2e:b3:13:dc:
         90:6a:c5:e6:91:42:0a:ca:0c:02:bd:30:fc:99:34:9d:8c:ed:
         ea:e2:57:a9:d6:19:77:a9:f6:0c:db:1b:76:33:2c:d6:2a:90:
         fd:fe:f0:20:a0:43:e5:aa:14:e1:5a:ef:3b:ee:2c:84:f3:a6:
         ec:6b:d3:ee:ea:14:4a:fc:28:b4:d9:56:90:dd:2f:e7:25:c8:
         6c:70:78:7d:52:b1:56:d7:1e:39:ef:a3:88:47:93:f5:49:7d:
         59:3d:04:c9:1e:fd:b6:43:05:dc:c2:96:9a:7b:d7:74:bc:24:
         fb:97:24:8c:cb:48:e7:dd:5e:be:5b:33:99:c9:cb:24:82:85:
         11:f0:51:f2:64:cb:51:65:4b:96:ba:c1:d2:f9:21:78:40:25:
         3c:94:88:5d:e8:e4:3a:2f:ca:78:ee:26:6d:96:96:a8:72:ad:
         8e:82:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:51 2025 by rpki-client