Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa
File:                     40f3801f-2fad-3546-9954-90e36fe46778.roa (raw, json)
Hash identifier:          CNgJC1Un3tkRDKpphAUKmpd6zL6G7W+q5WM5gyPPK9s=
Subject key identifier:   29:06:25:05:DB:99:94:F8:E3:3D:A1:B2:15:3A:DB:09:FA:F1:45:C7
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B03169038C8F04DD999007580
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     22781
IP address blocks:        108.171.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:90:38:c8:f0:4d:d9:99:00:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=4b0d7a4f-e9b3-485b-b808-ddb813aa3abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:e4:4f:33:25:6e:51:36:da:e8:fe:54:bd:
                    56:3f:93:3e:cf:95:63:4a:26:38:1d:4b:27:57:cf:
                    c2:13:7e:35:a6:91:db:15:6e:15:a2:74:8a:79:da:
                    6f:6d:20:bc:16:03:32:c6:4c:4b:be:df:5d:78:12:
                    25:71:57:ca:1e:3e:9c:fb:86:c9:e9:f7:eb:1d:c5:
                    a0:cc:ab:27:99:a8:0e:57:5b:d9:79:c9:29:6b:d5:
                    3f:f5:ed:47:cc:71:e1:c2:ea:e7:c7:38:c4:fd:97:
                    21:21:4d:2e:f8:50:c5:b9:ff:ac:53:f8:75:3a:bd:
                    e1:4d:58:c6:a9:d9:a8:9f:b8:a4:66:64:76:ac:55:
                    75:3e:af:84:90:e8:34:41:e0:a6:47:66:68:58:a6:
                    c1:e7:65:10:5e:65:d2:61:0b:b0:e9:b0:91:a3:42:
                    ba:1e:f9:53:1c:80:3f:43:40:2c:d7:64:b1:81:ce:
                    bf:22:ee:68:c3:95:45:6e:1f:4c:e4:cb:7c:f9:fc:
                    85:48:af:79:61:56:f8:07:f6:1b:e8:5e:68:80:1d:
                    24:d2:b0:67:23:aa:c7:c2:65:3f:ea:2f:98:55:65:
                    66:2e:ae:ae:31:4c:b8:e8:86:58:8d:c3:58:59:b2:
                    ac:44:c0:f5:28:51:fd:dd:c3:97:a3:db:61:da:4b:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:06:25:05:DB:99:94:F8:E3:3D:A1:B2:15:3A:DB:09:FA:F1:45:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:d7:69:42:49:fd:8c:5b:ae:5f:4b:50:b1:cf:d4:4a:0b:
         36:67:61:bf:cf:8f:3a:e7:63:d9:a4:26:9b:33:c9:33:2e:bf:
         b2:d1:77:28:d7:07:62:6f:bf:a2:d2:62:51:3e:44:03:40:57:
         c2:8f:a1:26:f6:3f:72:4b:ce:60:dd:d3:6c:ec:52:51:22:66:
         e6:9e:11:bc:de:fd:92:83:a2:e0:aa:58:2b:1b:0a:05:62:0b:
         87:49:ed:15:1f:ff:da:0f:0e:f3:27:ec:98:0d:b6:a5:10:fa:
         df:0a:5a:da:d5:83:18:07:c8:0a:a0:c1:97:20:cc:8d:36:24:
         73:9e:24:ee:22:39:fc:d5:d7:b6:64:96:1d:c1:af:90:95:43:
         1b:bd:66:6a:d9:d6:f7:09:30:45:94:20:6e:7b:f8:70:ae:ea:
         c5:2c:04:5f:c6:a9:e6:b0:95:4a:7d:8e:db:2d:47:84:60:09:
         7a:f2:93:13:0d:de:b7:c4:b9:59:a3:fd:70:0c:58:ea:35:6c:
         38:8c:32:7d:dc:f7:ba:e8:e7:b3:07:8c:fe:cf:c2:3d:bb:51:
         a5:75:5d:6d:89:87:ea:f5:9a:99:37:2b:c3:e2:84:53:6b:2a:
         ae:65:5b:40:33:39:4f:9b:1a:0d:81:ae:e1:ba:a7:51:45:e1:
         63:d1:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:59:00 2025 by rpki-client