Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa
File:                     1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa (raw, json)
Hash identifier:          HwMDAPJ8D/IPbrFjHA+4y20GZfl2eixbhdk/2U63Tpg=
Subject key identifier:   87:20:18:5E:72:53:C6:E4:17:0D:74:A0:24:7D:51:E4:CE:92:B0:1F
Certificate issuer:       /CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7
Certificate serial:       010D0C9F4328584A6DBB47DB244E9BE45C612380
Authority key identifier: A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     399194
IP address blocks:        172.81.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:47:db:24:4e:9b:e4:5c:61:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=258dfb7d-568e-4850-8b46-cdcd2c63a70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:3b:cf:78:c5:6b:28:9d:ee:5c:f8:61:0e:
                    22:0e:e5:36:b5:de:88:9a:06:ff:9d:98:de:7b:87:
                    1f:2a:12:31:8c:3b:50:00:a9:0b:57:8c:42:39:e7:
                    55:11:63:9f:95:8b:04:32:4f:a6:48:4c:f4:df:e5:
                    e0:fb:d8:ad:38:49:03:3b:9b:bc:7f:0d:ca:7d:63:
                    70:27:67:c8:42:2e:c3:00:19:07:e0:ed:4d:b2:d9:
                    a0:a5:28:85:aa:49:0b:8c:b0:cc:0d:34:21:90:8a:
                    96:bd:09:37:bf:45:11:e0:22:f2:a0:d5:c8:ec:2d:
                    07:ff:80:ed:37:eb:f6:6d:81:2c:57:6b:5e:d5:bd:
                    71:74:ae:3c:96:bd:c5:64:ab:01:d3:e7:4a:08:f3:
                    6d:35:b5:22:13:2a:36:ef:31:c5:6e:09:4b:2f:2e:
                    5f:e6:0c:c6:04:a4:80:62:9a:80:60:a3:46:19:55:
                    c6:0a:dd:56:de:8d:bf:8d:b0:72:3a:99:70:df:0d:
                    6e:d5:44:39:7a:be:7a:f0:7d:c7:eb:fb:29:e8:35:
                    f1:20:43:3a:47:d7:5e:c9:c5:fa:df:5c:59:b3:8b:
                    ca:8d:5b:f3:bd:44:1f:43:38:9b:a1:0f:1e:b5:cb:
                    4f:c7:b2:08:51:5d:e5:50:8a:a0:3a:89:2e:73:eb:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:18:5E:72:53:C6:E4:17:0D:74:A0:24:7D:51:E4:CE:92:B0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:23:4d:5d:17:81:ba:35:93:35:9b:58:23:ed:7a:de:52:80:
         95:c4:56:3c:75:75:a8:6f:5a:5f:38:d1:8e:e9:55:a9:74:7f:
         79:12:42:28:67:b3:9c:a1:87:30:05:48:9e:5a:7b:a4:d9:5d:
         25:43:0c:c8:c7:d1:a4:a1:04:94:c5:d0:89:18:b4:fb:23:9e:
         ba:57:70:c2:29:ad:77:b6:cc:2b:dc:2c:c1:9a:2b:ec:8c:cf:
         3e:84:2c:23:c1:16:b6:5e:50:12:b7:04:5e:9e:f7:9e:04:8f:
         09:23:e2:f1:ff:81:7a:8d:41:d3:e8:98:a1:71:3d:ed:43:d7:
         54:48:5a:78:3e:8d:e0:28:08:c7:c0:24:1a:39:01:10:33:67:
         70:9f:72:e6:e1:0f:73:9d:22:c6:9f:80:07:b1:86:21:15:7a:
         24:93:a2:27:a6:9c:9f:63:c0:b0:53:67:24:d3:b3:c2:00:a5:
         39:cc:10:e3:01:8c:a7:4d:82:71:94:12:b4:7c:7c:f2:32:14:
         ed:a9:07:dc:fe:51:74:44:64:44:b3:15:bb:25:4b:57:4a:0e:
         55:85:ff:16:61:d3:d9:3f:da:3c:27:af:34:3c:ba:e1:a4:b2:
         86:95:14:6f:2d:bf:d7:0d:cc:a9:f8:c1:60:89:9f:d9:75:cd:
         f5:2b:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 23:43:00 2025 by rpki-client