Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2ac632e-3796-31d1-9da0-50592600ab35.roa
File:                     d2ac632e-3796-31d1-9da0-50592600ab35.roa (raw, json)
Hash identifier:          MfUinsfJ4vCTJ8ek8liYMzjeH4iTp0BkIviH0pT75Y4=
Subject key identifier:   63:5D:D5:CD:8E:82:EB:11:C2:C0:CD:E9:01:F9:E0:AE:9F:FA:55:10
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A92FC6B992E943D5CEFEEA640
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2ac632e-3796-31d1-9da0-50592600ab35.roa
Signing time:             Sat 19 Jul 2025 21:17:23 +0000
ROA not before:           Sat 19 Jul 2025 21:17:23 +0000
ROA not after:            Fri 17 Oct 2025 21:17:23 +0000
asID:                     25198
IP address blocks:        139.177.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:fc:6b:99:2e:94:3d:5c:ef:ee:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 19 21:17:23 2025 GMT
            Not After : Oct 17 21:17:23 2025 GMT
        Subject: CN=76a54ac6-d756-4db8-9839-f80818ef9e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:d8:cf:b3:e1:37:14:76:81:42:e3:75:2a:
                    ba:15:1f:d3:18:b9:bb:0a:bc:6e:56:3d:a5:8e:66:
                    49:b6:c3:d0:24:5d:0b:ff:cf:8f:b4:5c:e4:b2:67:
                    2c:9e:d2:a1:11:16:28:8e:98:7f:0b:c8:36:eb:3e:
                    7d:92:cb:92:40:c3:34:7e:5b:a4:1d:84:e1:8a:bc:
                    ae:e6:44:ab:d5:ca:2e:64:85:a6:d3:b7:de:ce:a6:
                    88:74:19:0b:fc:93:d4:7e:ab:a1:11:b6:54:85:25:
                    65:ec:a7:d7:b1:1a:6c:9f:06:33:4e:2d:b5:d7:e8:
                    15:11:d5:72:af:ed:2d:9b:b7:d8:a6:ef:76:3c:19:
                    ed:de:50:07:3e:25:d3:62:35:44:e5:83:b7:eb:c3:
                    ba:c1:ab:4e:35:6e:ba:4e:50:2c:31:c0:16:ae:39:
                    84:1e:b7:cc:92:66:d4:70:c0:4a:03:9b:05:02:0d:
                    76:49:26:3a:2a:e4:8b:e6:32:03:49:41:bb:0b:ec:
                    2c:ad:e7:4b:34:fe:6f:d1:b8:28:49:29:27:54:3a:
                    76:2a:3e:23:0f:de:84:cb:dc:65:f5:07:c7:fb:43:
                    b0:96:cc:7f:51:d2:56:a8:1f:d3:5b:47:f0:42:d1:
                    b9:b3:9f:f9:17:2a:46:28:30:90:a5:86:59:73:b6:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5D:D5:CD:8E:82:EB:11:C2:C0:CD:E9:01:F9:E0:AE:9F:FA:55:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2ac632e-3796-31d1-9da0-50592600ab35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:fc:44:ab:5b:49:b9:7d:ca:e0:5d:83:b6:9e:db:2c:d9:
         3f:f5:13:b7:92:e3:7f:8e:69:ef:69:48:d7:d5:56:1a:0c:db:
         e8:6d:a7:30:e8:57:cd:82:be:1d:f8:d6:e9:f0:df:59:38:52:
         95:79:08:c2:fe:91:1b:93:9c:0a:64:57:73:36:84:86:31:4c:
         4f:f4:e4:1e:c5:3c:34:67:45:3d:82:b3:35:42:85:03:62:d5:
         2e:69:38:32:d1:44:dc:56:e3:36:81:82:54:2b:df:29:2b:72:
         44:dd:75:ef:03:65:94:7d:0b:32:c1:f8:b6:af:54:aa:0d:9b:
         f7:7b:2c:10:a7:aa:75:e7:4d:13:08:19:36:ff:2d:58:ef:53:
         18:0d:7e:76:5c:b4:2a:fb:62:ed:8d:46:aa:2a:1e:4f:a4:73:
         f2:9e:7b:51:46:10:b1:42:cb:80:a7:78:82:df:61:ac:11:cf:
         bc:b8:36:c9:88:f6:ad:24:a3:4b:8e:1c:31:9e:26:e4:34:dd:
         e4:90:16:ab:f8:ed:f3:cd:15:f0:14:c9:43:ae:4a:a4:60:2d:
         19:5b:04:df:31:82:82:a2:21:1a:4c:a0:4b:1f:5c:55:66:24:
         b9:05:9e:ac:56:63:10:5b:e1:8e:24:0b:63:0d:7d:1b:7b:54:
         29:77:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:22:27 2025 by rpki-client