Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f27f88f0-2ff8-30b1-953e-93f1579004db.roa
File:                     f27f88f0-2ff8-30b1-953e-93f1579004db.roa (raw, json)
Hash identifier:          mt8NKolKm2dCiPh59Ar7h80sj08KsSkz4DieXGxAc24=
Subject key identifier:   D4:1E:EF:66:2E:91:94:C6:F1:0D:FB:AE:63:D2:05:AB:87:FB:4B:87
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A80F74094B330CB81A97819B6
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f27f88f0-2ff8-30b1-953e-93f1579004db.roa
Signing time:             Sun 13 Jul 2025 10:22:25 +0000
ROA not before:           Sun 13 Jul 2025 10:22:25 +0000
ROA not after:            Sat 11 Oct 2025 10:22:25 +0000
asID:                     214143
IP address blocks:        173.232.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:80:f7:40:94:b3:30:cb:81:a9:78:19:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 13 10:22:25 2025 GMT
            Not After : Oct 11 10:22:25 2025 GMT
        Subject: CN=cd118d0a-1280-4b37-815b-bfb3b9bb9859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:c8:a8:10:b0:89:94:bd:68:ce:01:3b:2b:
                    80:65:11:3f:e9:e9:74:a8:2a:1c:99:fb:92:6f:89:
                    11:53:20:93:7d:d9:5a:2b:2e:11:46:09:b0:55:8c:
                    f8:8b:e0:ef:cc:92:c1:e9:84:e8:44:b3:df:b6:c5:
                    08:5d:87:19:93:58:b3:2e:4c:10:ca:75:3e:d4:9c:
                    45:87:e2:bd:b1:e6:8b:d9:e9:dd:2f:4b:34:4a:92:
                    6d:0c:35:40:03:99:42:5d:41:44:a7:58:87:63:21:
                    75:ae:ec:44:78:60:f3:bd:70:a6:8d:7c:18:41:c9:
                    21:16:83:0a:50:f9:f7:0d:81:7a:83:ed:c4:57:6c:
                    b2:72:83:7a:27:96:df:0f:10:a9:61:43:e3:82:37:
                    9b:55:de:42:ba:14:d7:8d:f7:60:d2:ca:df:33:53:
                    39:18:8c:cc:ab:c1:ca:ee:16:bb:4c:58:98:9a:81:
                    9f:98:05:76:61:f4:00:57:6e:a0:cf:56:b5:48:9b:
                    08:38:a3:1f:d8:c9:76:d5:e4:54:42:31:bd:d7:4a:
                    1f:6a:be:93:8f:ea:49:79:19:a3:72:b2:1f:c2:48:
                    e7:c5:2c:50:1a:70:72:62:86:0f:b4:0f:4f:82:de:
                    20:bf:4f:63:0e:ac:0d:6b:b6:55:18:c1:34:8f:76:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:EF:66:2E:91:94:C6:F1:0D:FB:AE:63:D2:05:AB:87:FB:4B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f27f88f0-2ff8-30b1-953e-93f1579004db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:29:f8:a1:fe:7e:36:63:4b:36:84:de:0d:e5:67:62:3f:cf:
         37:f3:9d:2a:50:38:68:de:10:19:25:33:1d:a9:c8:0c:b6:6c:
         fb:18:16:e6:69:67:21:0a:32:1d:dc:dc:bf:84:07:49:5e:7c:
         8a:86:d9:ae:b7:70:55:24:f9:07:fe:dc:39:02:06:ff:dc:fc:
         6f:c2:56:b0:04:83:cf:0f:05:d4:9b:6d:b8:fe:34:7b:a8:2a:
         9b:4c:55:78:65:4f:c9:d8:0e:10:ba:ee:ab:2f:d9:a3:73:81:
         aa:9c:54:0a:68:91:29:65:cf:e7:ca:82:23:33:aa:22:d6:f6:
         d6:a7:83:b4:e1:d7:cd:2a:8c:dc:36:05:e3:50:31:a5:be:18:
         b4:4d:f0:0c:b4:80:3e:9b:35:4d:75:8f:fa:b7:9f:89:e3:bf:
         99:ce:06:ee:7f:eb:a5:57:9b:b4:e1:54:4e:d9:cc:3c:e8:bd:
         a9:3d:eb:aa:90:27:54:53:d2:25:43:98:44:25:ad:b1:4c:64:
         0c:6f:c2:69:45:77:55:95:a8:a0:df:cb:43:a0:15:10:a1:c3:
         b1:0e:1a:f9:97:6c:85:6e:b0:6c:dc:63:b1:0b:db:68:03:2d:
         5a:0a:f5:71:a9:7d:83:54:ff:77:30:98:50:e8:39:28:dc:a0:
         0d:dc:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:58:10 2025 by rpki-client