Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08e80737-cfaa-3267-b35d-77cf89c44820.roa
File:                     08e80737-cfaa-3267-b35d-77cf89c44820.roa (raw, json)
Hash identifier:          mS5QReYsRuBPSwFF+mbKjAPupk/lL6ggH+A+NKIQqd4=
Subject key identifier:   72:4D:A8:8B:FB:B8:7D:FC:A7:04:94:8E:2E:DC:9C:CD:48:B3:1F:05
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB5353C6971A8ADC778520
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08e80737-cfaa-3267-b35d-77cf89c44820.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:53:53:c6:97:1a:8a:dc:77:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=68d72b37-d474-4297-89eb-cd80d9505877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:c4:e2:ad:b8:09:60:58:79:c3:c9:e5:47:
                    76:83:80:44:ef:92:72:d4:ec:30:1a:1b:24:02:7d:
                    61:6a:00:17:c9:0d:f2:b9:5d:b9:fb:a0:ca:16:d6:
                    cd:b5:e0:bb:48:5c:9b:af:fe:00:cf:74:69:0d:e4:
                    fb:22:fa:6c:f7:87:7d:d2:ae:3f:78:87:d4:c0:07:
                    e3:86:5a:dc:0b:0c:18:2c:cd:0b:15:5e:a8:fa:e6:
                    54:b3:1f:3a:29:d5:4b:6a:13:49:e7:09:b4:3f:a5:
                    dd:83:86:71:da:1a:f9:16:c1:8a:4d:e1:16:22:77:
                    35:dc:1c:74:0a:95:c8:60:6c:f4:c3:eb:84:25:ce:
                    c7:5c:e1:92:66:b5:77:3b:92:11:b6:e5:3a:bc:22:
                    09:6d:63:1f:6c:59:90:83:24:44:35:84:5d:95:35:
                    93:e7:55:b3:37:9a:a5:77:47:7b:a1:fa:f1:76:c9:
                    ed:da:d2:52:3c:c5:72:26:78:15:76:a6:20:e8:50:
                    bc:17:40:8c:30:39:e2:ad:69:25:d5:6e:40:19:4f:
                    2f:93:df:1f:8a:c7:94:5f:e0:04:8a:27:68:05:22:
                    32:fe:12:28:ef:3d:de:96:16:8c:37:de:80:82:c1:
                    59:f5:04:fb:ca:48:61:ee:79:4f:1a:a8:de:d6:c4:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4D:A8:8B:FB:B8:7D:FC:A7:04:94:8E:2E:DC:9C:CD:48:B3:1F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08e80737-cfaa-3267-b35d-77cf89c44820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:c0:c7:ae:68:5e:53:f2:1f:e1:7b:13:28:9c:61:af:51:
         88:23:2e:8e:a4:6d:f1:9e:b0:ec:ee:f8:ac:ed:00:52:26:f0:
         c4:05:12:dd:75:a6:ba:44:2c:1e:1b:d3:c6:f1:e3:83:ef:fb:
         be:1a:29:be:f4:d0:de:72:34:10:9c:6a:39:f6:8a:5f:7a:98:
         d9:4d:7c:02:e0:0e:92:83:48:1b:3a:f2:47:c7:eb:fe:ef:34:
         39:a4:6c:ec:0d:d6:67:f4:66:b1:3d:51:9b:2c:82:ba:07:f6:
         e4:d9:a5:3e:f1:ca:2e:f3:db:68:79:83:0f:5d:4b:c5:18:d8:
         2f:0a:73:01:8e:31:53:2a:44:eb:d0:5c:d5:e4:47:f8:b8:35:
         d1:1a:a2:8a:65:4e:e7:66:5a:ae:ee:6e:11:4b:ba:2e:e5:20:
         a6:71:6e:a6:24:a5:93:78:66:3d:35:2e:bc:d7:d7:59:9e:53:
         6c:1f:bc:0f:71:ac:e9:00:fa:f5:0b:73:77:51:07:ab:93:5b:
         58:2e:1f:fe:c5:9a:d5:aa:2e:70:31:9d:b9:14:07:5c:44:b2:
         98:71:08:72:a5:68:03:ea:a9:62:e3:cc:19:be:31:26:7b:f7:
         33:d0:5c:ad:d8:ed:56:11:0a:58:2c:9c:15:8f:23:f8:b8:d9:
         dd:8a:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:26:08 2025 by rpki-client