Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
File:                     ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa (raw, json)
Hash identifier:          ULVamoRhUYiQmz11/LOj4olUgZftynxEc3gQPiHMX4c=
Subject key identifier:   6F:95:AE:7A:CE:34:AA:C2:F4:DB:B3:72:7B:1E:1D:A7:C0:6F:A8:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC1C1A633BE526266454C200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     7342
IP address blocks:        209.131.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:1a:63:3b:e5:26:26:64:54:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=f714db56-1ada-482f-bf3b-f3d940cdfdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:94:7b:5c:e6:2f:de:46:c1:8d:06:76:0f:
                    b7:a6:ff:8a:75:f1:91:cf:6d:d4:dc:56:34:39:c2:
                    e4:c3:31:df:96:40:7d:7f:4f:ea:3b:c5:64:45:1d:
                    50:96:f3:f6:a4:b4:75:6c:d4:3d:1b:ee:38:01:41:
                    62:60:d8:1e:5c:5e:cd:05:bd:c5:73:01:f4:4f:3d:
                    b6:e7:ac:db:5f:ec:f1:2a:ae:fe:51:ef:bf:61:05:
                    f1:24:c0:4c:5e:ba:8e:a3:cc:dc:24:b1:58:13:6d:
                    0d:89:9c:7d:79:30:5e:c1:60:d0:6c:f6:f5:68:27:
                    93:72:7f:6c:58:55:e3:b3:23:73:a3:75:55:fc:74:
                    41:d2:64:e9:23:65:e7:21:d5:c2:5d:22:1e:5d:b8:
                    c7:e6:54:fc:5d:80:82:b0:c0:78:8c:f1:10:67:be:
                    24:98:45:51:ad:b5:2d:9b:e3:6a:78:69:98:e6:27:
                    1e:1c:bb:ca:b2:3d:a8:4d:26:4c:68:0a:c2:8f:a0:
                    c5:14:3f:a0:b5:d5:cd:39:03:91:4d:8f:fd:4e:d2:
                    cf:aa:48:f2:5c:2f:8f:e5:d2:7c:2e:d0:99:dd:6e:
                    42:b3:28:f8:a1:70:e5:37:80:59:44:03:e4:a8:87:
                    90:76:ec:a4:f6:df:5c:fd:8a:98:b3:f0:93:d2:e5:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:AE:7A:CE:34:AA:C2:F4:DB:B3:72:7B:1E:1D:A7:C0:6F:A8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:f2:c6:82:89:f8:7c:02:14:1e:aa:d5:af:52:0f:53:6a:
         c4:00:92:bc:1b:7b:1e:35:99:cc:29:9d:9a:01:5f:63:8c:1f:
         2a:cd:4b:7f:fc:39:c3:21:1b:6f:fe:ee:14:a5:fb:c6:13:8e:
         95:ee:d9:d9:99:f4:17:75:52:92:d6:31:b5:d9:17:05:2d:87:
         f7:9d:91:ff:ca:85:ef:34:cc:b5:fb:b6:85:8b:21:5f:af:1b:
         ef:87:3a:e3:69:80:dc:a8:64:9c:87:34:1a:e2:5f:de:f6:20:
         09:eb:28:62:3c:ca:f6:6a:e0:3d:f1:21:9a:a5:3c:85:c1:90:
         e0:0b:87:27:6a:8c:17:20:33:26:6e:96:de:e8:c7:89:4a:b0:
         ae:bd:00:fc:c3:aa:e6:ea:a5:ff:de:e1:5a:51:02:87:19:c6:
         f8:98:35:b4:b5:3c:a5:a3:18:af:44:4b:37:c7:cf:a9:1b:26:
         dc:a2:2a:7a:76:20:9c:7c:13:68:08:21:92:67:a1:82:0e:ca:
         bb:31:be:30:2c:7d:02:a5:06:87:12:d5:16:91:12:ff:96:46:
         c9:78:d4:51:5f:c1:ce:f1:4b:d5:31:7b:f5:f1:86:6d:25:ac:
         e8:cb:67:78:e7:12:d4:5a:13:90:88:96:fa:72:78:22:31:91:
         56:66:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:35 2025 by rpki-client