Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa
File:                     452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa (raw, json)
Hash identifier:          9LpX/xtJppI+/h6ybeV38Nx9uMONxUwgEEn47BN4xrY=
Subject key identifier:   43:E1:7A:69:C4:AD:B0:5F:62:A1:2F:C4:D3:17:A9:AA:23:BB:83:1E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE0D1CF1FBA227F8ADA080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        172.217.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0d:1c:f1:fb:a2:27:f8:ad:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=071000cc-2909-4c3a-a5db-d05d3465208e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:77:48:b9:f2:72:a8:df:67:0a:d1:45:ff:
                    d6:c5:36:0e:92:77:6d:00:83:78:bb:f2:d8:ff:57:
                    32:33:cb:cb:f6:67:2d:cf:b4:48:67:e9:e5:b1:e2:
                    bf:c5:63:18:b0:39:d4:88:99:10:15:34:0f:44:12:
                    d1:4a:c7:66:1d:a8:a0:80:37:a0:7b:c0:1d:28:10:
                    c3:f9:eb:94:3e:00:0e:bf:84:e5:60:77:6d:11:70:
                    3c:1c:ab:4e:93:40:ca:35:e8:73:62:11:60:c2:ca:
                    0f:a1:8c:d6:9d:48:25:d6:f8:72:7a:1d:5d:3e:f2:
                    76:6b:f4:ac:73:dc:e8:76:7e:cc:e4:d9:dd:53:85:
                    01:6c:17:0f:68:9c:4c:ef:66:b7:c8:2e:63:dc:85:
                    0d:0e:93:8f:5a:85:8b:72:ae:50:d0:b8:6e:78:5c:
                    39:0d:25:bb:a8:f0:a6:1e:b3:a0:54:a6:9c:3d:30:
                    68:d5:24:07:4c:2f:78:37:63:cb:0e:41:31:85:f7:
                    66:0b:4e:e7:7e:6f:5f:9a:66:3d:91:c2:17:dd:5d:
                    b9:58:b7:95:6b:51:ba:8b:cd:d6:6e:00:22:fb:b3:
                    c3:cf:ba:64:df:09:62:a4:42:69:22:26:97:c3:03:
                    f2:5e:72:06:32:a5:9c:c0:3b:b1:5c:51:f9:59:2a:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E1:7A:69:C4:AD:B0:5F:62:A1:2F:C4:D3:17:A9:AA:23:BB:83:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:7b:9b:f7:1c:0d:b6:42:41:dd:1c:32:2a:ae:b9:5f:9c:
         03:4a:fa:8c:8b:44:ae:5c:7c:ea:64:57:2c:c1:a1:cc:23:8a:
         c3:02:c9:2f:4c:1f:37:1a:d8:86:bb:50:56:e9:1c:4f:d7:d0:
         48:3b:da:54:50:76:dc:f6:15:d4:6d:c5:eb:ed:9d:66:c8:ee:
         fb:f6:d7:c8:f5:b6:d5:15:bb:89:c9:b8:a9:82:65:53:f3:09:
         77:f4:99:65:3b:46:74:5f:43:63:ad:39:26:06:05:cc:4d:23:
         47:70:85:1f:ec:c4:c4:82:a1:13:90:d6:6d:d5:16:68:10:7d:
         82:dd:59:bf:d2:12:62:be:17:4d:21:35:97:8e:77:94:6b:45:
         af:d1:10:72:99:7d:33:83:a3:b9:8f:a5:e6:93:3b:94:20:a4:
         36:05:12:6f:90:7d:1c:48:ff:d8:05:8c:56:33:a9:4e:a8:fc:
         63:7e:2b:ba:4f:1f:88:ae:c9:fa:fe:77:04:35:e6:de:ff:d2:
         db:2f:1d:c1:06:6b:fc:f4:0d:ba:3c:ea:2b:23:c8:42:99:df:
         2d:69:2f:b3:d9:87:ef:bd:30:2a:9f:f9:bd:8b:c4:44:93:55:
         3a:2e:dd:03:4f:00:45:5b:2d:83:7e:9e:6a:3f:d5:fe:f1:d8:
         ab:09:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:03 2025 by rpki-client