Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3d4b8873-99c7-3779-be80-e7aec489c7ba.roa
File:                     3d4b8873-99c7-3779-be80-e7aec489c7ba.roa (raw, json)
Hash identifier:          0R92sQaL6zcNRj3goyvZBmn9srL4vVmUj4TcKXBFhDM=
Subject key identifier:   A2:62:63:9F:D4:7B:AC:A6:17:52:02:52:6F:53:C0:E1:99:92:22:EF
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126F570F226D00697943E00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3d4b8873-99c7-3779-be80-e7aec489c7ba.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     22652
IP address blocks:        173.231.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f5:70:f2:26:d0:06:97:94:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=0e13197c-3a63-49cf-82da-133cc282f930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:3a:52:41:1b:95:69:d3:fa:e2:f0:9a:f4:
                    4e:c5:6b:af:1a:b0:ef:e5:33:a0:4f:9e:2f:dc:25:
                    d1:aa:f1:1d:c8:0c:e9:ce:5e:33:ad:a3:aa:e6:cd:
                    94:60:a2:eb:d1:b2:7f:c0:5a:fa:f9:67:e3:85:40:
                    7c:7b:00:01:2e:79:53:22:93:d2:1d:4e:d7:68:81:
                    12:12:ba:e6:ec:b0:d8:af:8f:4c:67:ec:56:a3:db:
                    4f:04:a7:c3:2f:91:69:e8:41:0e:2a:26:5f:9d:14:
                    fb:4e:83:bb:89:64:0f:cd:03:57:cf:f9:43:dc:8b:
                    82:5a:41:6e:55:a2:a0:28:cb:75:b1:b4:4d:a2:0b:
                    55:f9:fb:ff:46:7b:e4:be:4a:c9:04:09:3b:99:4e:
                    c4:05:b4:7d:d0:c7:cf:cd:bb:4d:35:ac:d3:42:84:
                    c6:8e:b1:4b:44:de:f7:bf:d7:54:55:17:b5:54:0c:
                    2f:4b:c4:1b:72:1f:b0:15:35:d5:38:2d:b0:65:e0:
                    73:96:fc:1b:07:29:3f:44:da:74:e1:64:bb:3a:eb:
                    14:d4:a7:d3:6d:17:31:25:fb:0f:c8:ec:6c:5c:90:
                    2c:c0:d0:c4:3c:51:78:df:43:53:01:02:c2:b9:29:
                    21:3b:c2:38:e3:35:d8:d1:20:9c:48:7a:cb:55:8d:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:62:63:9F:D4:7B:AC:A6:17:52:02:52:6F:53:C0:E1:99:92:22:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3d4b8873-99c7-3779-be80-e7aec489c7ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.231.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:9c:42:d5:aa:08:89:f8:8f:b7:2d:29:71:9d:2b:34:18:
         66:55:4e:52:28:d1:c6:8f:96:3f:75:78:83:fc:8d:ed:3c:28:
         8b:18:71:c6:ad:27:75:63:6f:37:9f:6e:ef:c9:a2:0b:d8:d8:
         d2:da:97:90:fa:6c:80:8d:e9:54:e8:7d:47:ec:d7:81:af:cc:
         8d:41:a8:05:f1:9f:86:0b:49:02:08:38:07:b6:9c:85:28:50:
         71:7a:b5:82:50:4b:9e:4a:a2:bd:44:52:ef:f8:e5:91:79:94:
         6a:e6:82:2f:ae:a0:bb:0c:c6:3c:e1:3b:be:c7:a9:81:e7:a9:
         73:8f:11:39:3d:16:36:3c:3c:3f:e4:33:46:aa:1e:bf:dc:06:
         13:84:d8:c8:0b:16:cc:d8:32:3a:19:93:2f:c7:dc:b1:a4:54:
         a4:e1:3e:37:de:a5:18:66:c2:33:cf:e4:9f:ca:79:0e:c1:4a:
         54:28:9f:36:18:6d:ee:64:10:83:62:dc:4f:cc:45:ec:bb:1c:
         5f:c6:35:80:62:3a:a9:e4:cd:cd:b9:ea:42:83:e9:3d:99:72:
         c1:0d:af:e5:61:38:cc:70:30:55:7f:c0:8b:c1:70:0c:6a:28:
         c5:f1:02:6d:83:4f:9b:d6:ff:ad:e4:a6:b8:d4:41:02:1c:9f:
         eb:a2:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:40:24 2025 by rpki-client