Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa
File:                     90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa (raw, json)
Hash identifier:          PB4l0GGbzCCJmsxFLRibZwgnOkiuHMblmi2KZAaCM50=
Subject key identifier:   AA:83:07:A9:31:AA:B4:57:C5:D4:FD:C0:F5:DB:F5:33:4C:73:74:6A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A612B0FCF1ED10696B29277B0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     211440
IP address blocks:        203.17.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0f:cf:1e:d1:06:96:b2:92:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=a128c896-5d9c-44d9-ac9e-fc9adc9c7336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:75:9d:7b:30:ed:37:56:ce:df:d9:44:5f:
                    41:ad:55:bd:ba:d5:2e:da:cc:23:a5:ea:0b:0b:73:
                    5b:4b:ec:be:43:2c:6b:74:1f:af:d2:9c:14:36:3a:
                    a9:0a:3d:be:28:8f:6b:d0:db:38:fc:21:bb:91:6a:
                    f1:c1:72:0e:01:6d:42:b8:ac:45:44:f2:c1:a8:4d:
                    7d:41:65:dc:5e:25:48:81:0c:c9:9b:86:a4:7a:76:
                    73:3b:bb:88:87:7a:73:d5:6e:6b:12:6c:04:e0:97:
                    51:f5:8b:8f:e1:c4:07:0e:6d:6b:1c:2c:2a:a3:49:
                    68:b7:a8:10:3b:ae:0b:ae:2c:5d:2d:f4:18:a0:cd:
                    6b:c4:23:f2:df:5f:c5:9b:de:47:88:f6:34:c6:5c:
                    cc:9c:30:61:17:23:16:a6:f0:08:53:96:e8:ce:39:
                    5e:95:8e:44:ff:19:ff:12:4b:69:99:31:62:d3:86:
                    27:5a:9c:ba:4b:bf:3c:30:96:76:8d:01:7d:b8:4c:
                    60:f1:e0:02:8b:89:ab:82:b3:e8:0e:d6:23:30:ef:
                    1a:9b:80:c3:b8:dd:8e:b6:af:66:cd:ce:a7:bd:19:
                    5e:cc:29:8c:5d:d7:a2:a1:b8:81:27:94:2f:ae:a6:
                    cc:d6:30:a0:a8:39:2f:7d:d7:d8:bf:c8:14:40:62:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:83:07:A9:31:AA:B4:57:C5:D4:FD:C0:F5:DB:F5:33:4C:73:74:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:87:4d:e2:42:96:e2:8e:8d:35:69:57:b9:2a:9e:64:2b:
         32:71:bb:a0:48:9d:cf:7b:d1:84:eb:1d:8d:6b:63:40:36:15:
         3a:1b:f4:b4:9a:bc:5e:9f:e4:3d:87:d7:a1:bb:f5:f5:c4:66:
         d0:6a:e7:59:3d:c1:60:8e:88:20:58:27:24:8f:15:02:c5:59:
         29:a2:e0:d8:78:c6:67:da:7b:b2:3c:cb:89:38:9f:cf:60:37:
         73:80:32:3f:64:69:5a:08:71:07:11:15:eb:d3:0f:26:96:e4:
         c0:b5:05:29:da:0e:10:eb:ce:d7:18:fe:7d:25:8c:7a:25:33:
         6d:01:8a:3b:8d:af:50:74:41:55:4d:6c:0c:18:84:e8:a5:88:
         43:4e:61:e4:97:f1:76:97:a5:ec:9b:cd:63:65:75:bf:ee:3c:
         48:9d:4d:a3:a3:07:70:aa:e9:56:12:0b:47:af:30:a6:27:95:
         74:ce:ea:fd:db:9a:b7:8c:51:56:11:41:21:3b:ec:b0:21:26:
         7f:36:28:67:70:e5:e4:ae:a5:0f:b2:ff:5c:61:02:7b:94:56:
         b4:59:94:68:bb:b1:d6:7a:94:d1:5a:d2:0e:14:22:8f:51:28:
         02:28:e6:29:35:72:d7:dc:eb:36:e9:a3:b3:b6:a0:60:61:c5:
         72:ba:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:22:35 2025 by rpki-client