Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa
File:                     f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa (raw, json)
Hash identifier:          jYetjS6HP3f6zai6ZuseFRbt5MBle8DIjFp/7h3N63s=
Subject key identifier:   07:87:F7:50:07:A9:DB:49:1B:60:7E:60:BD:15:3B:BF:04:55:1B:45
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584B13D6FE446A99ED1A58BF7740
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     401585
IP address blocks:        172.81.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:fe:44:6a:99:ed:1a:58:bf:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=37a45ae8-e9f7-4b8c-9505-eac94aa94723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:f2:a7:ce:1a:26:06:ba:30:11:d5:29:94:
                    fe:d3:55:bc:80:4d:f6:5d:5f:95:22:2b:8d:21:d7:
                    27:a2:a5:f7:f3:e7:f2:46:46:ef:d1:1d:3d:d6:03:
                    b9:55:e3:a4:69:35:8d:1b:b5:dd:55:70:88:c6:30:
                    b7:7e:3b:90:91:0b:82:bc:3a:01:78:9c:62:70:4b:
                    4c:26:bd:37:27:c8:3e:2c:32:f5:b2:2c:2d:1c:f2:
                    df:a0:d1:89:77:a1:0d:e6:04:f3:ae:e6:81:0b:81:
                    81:8a:63:76:65:69:2d:23:1b:9d:a6:a0:1d:ab:c1:
                    3d:12:5a:17:df:a1:50:62:45:de:31:3c:de:e1:8d:
                    01:dc:d6:35:8c:f9:81:52:3f:01:44:ac:4f:0b:96:
                    df:ea:04:18:3e:bd:ed:11:0c:bf:6e:87:8a:ce:09:
                    fa:76:19:4c:4b:19:8c:0b:d1:24:e9:c7:62:74:03:
                    14:2e:3d:96:5b:65:7b:a4:3d:fe:9a:19:3e:ea:33:
                    07:5d:bc:42:87:b0:32:02:8d:97:0b:81:48:8d:8c:
                    f0:25:0d:b8:32:be:9d:9e:dc:61:29:26:b4:64:d2:
                    e0:71:26:1e:c6:b3:ed:31:ee:c4:20:f7:1c:9a:85:
                    42:95:60:78:3f:b0:6a:f8:c6:87:5c:2a:1a:f1:de:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:F7:50:07:A9:DB:49:1B:60:7E:60:BD:15:3B:BF:04:55:1B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:f5:e4:e6:c0:3f:bf:e5:32:d5:bd:88:29:5a:c7:b4:33:
         f9:2c:ca:50:ce:d1:16:09:2c:62:c3:fe:fc:95:17:5d:5a:b2:
         96:18:43:dd:44:d1:e3:5c:10:91:7f:da:93:0f:da:61:fd:3e:
         da:af:62:79:14:92:90:b6:f8:37:5d:62:54:d0:3b:6a:95:4c:
         0b:b2:89:02:64:3b:fb:d0:53:ba:47:5f:ba:e7:4d:47:0b:2b:
         28:fa:8a:5a:35:15:fe:9a:c9:71:ef:e0:86:09:75:a1:50:43:
         ea:e1:17:1b:18:28:5e:31:cf:27:c6:ed:2c:03:6b:3d:19:c4:
         8b:9c:cc:f7:01:7b:14:6c:18:a3:de:8e:6e:df:3c:28:ce:b1:
         9e:cb:eb:fd:0d:aa:67:49:56:25:13:66:10:a9:bf:1a:cc:97:
         14:91:ad:df:0f:bc:e2:78:86:ac:16:36:b9:c3:79:64:48:49:
         b8:07:fc:ab:d8:9e:29:b2:78:f0:7b:a2:41:a7:88:71:00:97:
         46:bb:13:b5:7b:61:31:fc:e9:dc:b8:e5:f3:26:95:ce:f4:98:
         7a:58:69:18:de:36:86:a2:12:6f:c3:84:6f:9d:5c:d6:2e:14:
         f6:1d:e7:b1:7a:b1:e2:71:e1:76:1b:a0:e2:30:2e:8c:96:eb:
         73:66:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:25:58 2025 by rpki-client