Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa
File:                     ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa (raw, json)
Hash identifier:          iuWS0XYg9AFlYEjh7F2e5C/x/o09UAZN9acHpwmHSU8=
Subject key identifier:   9D:1A:D2:FC:2F:D7:E3:76:46:B5:EF:F1:1D:4F:91:03:AF:AF:4B:D9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A7E7B79C06AF93BECC0092640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        130.211.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:79:c0:6a:f9:3b:ec:c0:09:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b977ba04-c6d3-4c40-a4ec-bb6d46fd8c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:aa:6a:23:40:b3:a7:5d:83:96:f3:c7:ea:
                    b4:63:55:ff:5b:e1:d9:d2:b4:6d:cd:cc:44:c6:51:
                    81:73:b1:95:c9:ef:79:db:68:8a:78:5e:43:6a:e4:
                    5e:4e:d1:d7:0c:f1:63:17:60:90:2b:19:9c:da:df:
                    c4:4d:a8:ba:20:bc:a7:4f:05:ff:2a:73:c1:7b:64:
                    d2:e7:3d:8b:d4:71:5d:5c:84:46:ec:5b:bd:f3:50:
                    07:0b:e4:88:10:bc:db:60:c4:2b:3d:c5:ec:03:e3:
                    e4:88:9d:70:a5:34:54:ca:c0:f6:86:f6:61:95:a1:
                    d7:18:ec:e5:a9:f2:af:0a:92:9a:6a:1d:42:ae:b8:
                    42:3c:dd:42:a9:39:19:1a:77:18:1b:cc:70:9e:71:
                    10:9f:01:72:c2:af:4e:59:33:47:a9:24:9d:05:4a:
                    14:ea:86:5a:b4:38:98:a2:92:0b:62:08:ba:33:d2:
                    ce:2f:a5:6a:de:a9:6c:a3:b3:9c:cb:a0:9f:ff:d3:
                    32:41:f4:e9:7f:96:3a:16:fb:13:1c:42:da:ed:32:
                    0e:5c:59:da:0c:af:9e:ad:5b:30:80:13:a3:fa:db:
                    9d:3b:43:af:2e:e1:42:12:d8:05:28:08:e4:33:80:
                    37:c0:d1:5b:4b:02:72:bf:f4:1a:63:94:b4:e0:09:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:D2:FC:2F:D7:E3:76:46:B5:EF:F1:1D:4F:91:03:AF:AF:4B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.211.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:99:b3:35:8f:2e:0a:fe:fe:21:94:1a:5b:d7:7e:85:62:
         76:e6:92:44:90:a1:89:48:cd:4c:2f:64:b9:a5:06:4f:de:c4:
         b4:ef:75:24:66:4f:18:74:71:83:65:d5:ee:eb:38:68:9e:e6:
         46:3d:38:e9:a3:d3:b6:c5:a1:5a:11:4d:a8:fe:02:ef:52:b1:
         6c:a3:ae:7b:7a:b6:07:f2:54:00:eb:17:b5:5c:7a:9a:2f:87:
         00:74:b9:27:d1:ac:a8:dc:f4:b6:59:d2:7d:4f:ea:ae:d4:90:
         49:dc:99:09:21:da:17:8d:e4:07:fe:6b:cd:7c:d0:c0:f9:9a:
         d2:59:28:5c:a1:fe:75:9c:4a:36:96:04:b5:95:1e:6d:b6:1d:
         f9:be:ce:5a:f0:c7:15:cd:f6:31:81:43:11:fd:90:df:b5:85:
         ca:e2:d4:ef:6e:97:0f:96:bc:42:dc:88:40:27:40:83:9d:8f:
         cb:33:fa:2a:1d:34:aa:90:9f:02:b0:45:94:de:0e:ae:58:1c:
         b2:50:32:4b:64:f2:6a:cc:14:7c:de:d6:d7:59:3d:54:57:ff:
         d4:db:f4:8e:7b:0f:57:3a:ec:13:7a:26:54:f9:ce:75:6d:41:
         56:27:df:03:b8:0d:dd:46:35:7b:21:c8:c7:ed:e8:c5:33:f5:
         93:08:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:22:18 2025 by rpki-client