Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa
File:                     ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa (raw, json)
Hash identifier:          6DmW0eMOYMsn1N5mHL2XNMz1q9353+0AZ+RSZxD/B9M=
Subject key identifier:   08:A7:41:A7:18:6C:53:53:BD:B4:D9:B4:96:74:F6:7A:11:90:8F:CB
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB53A26CB14788E7B60800
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:53:a2:6c:b1:47:88:e7:b6:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=b5fd88c4-e7e9-4391-9a90-f597fd0a54ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:20:4c:3b:ce:d5:15:52:c4:8e:d8:cd:11:
                    39:d0:ad:8c:bc:d5:90:d4:47:64:6a:d6:cc:68:a4:
                    9c:ad:e7:1a:54:84:0d:65:c7:65:3a:f5:18:b2:71:
                    c2:61:ec:2e:6e:ed:c0:50:37:56:12:89:5f:77:71:
                    f1:17:5a:0e:07:61:e4:65:9e:2b:7e:94:86:8c:48:
                    3e:a8:19:a7:83:bb:f5:ac:4c:f7:87:dd:3b:35:b8:
                    ef:98:2c:9a:a9:6e:5d:71:fe:36:3b:7e:16:23:4c:
                    a7:8e:3f:9a:e2:f5:c6:1a:55:34:21:1b:15:bc:21:
                    f4:26:8d:5c:a8:c1:6a:c9:e2:49:2c:ef:3f:d9:a9:
                    cf:30:f8:b5:a0:97:96:3c:ae:52:7b:f7:67:43:1b:
                    8b:74:d5:a1:d1:92:2c:44:dc:b9:1b:f6:ed:ee:9e:
                    7e:02:3e:39:3e:a8:9b:44:94:41:99:52:28:ec:41:
                    85:7c:e3:18:e7:6c:fa:0b:0d:f4:e5:89:07:39:11:
                    fb:49:82:97:c6:2a:65:6c:78:eb:f6:f1:f7:08:00:
                    6c:c4:0f:1e:b1:be:47:0f:32:fd:9f:52:e0:fa:fd:
                    45:2b:78:d2:c6:02:b1:f2:b2:5d:7e:5c:0f:46:50:
                    61:51:ab:6d:9a:51:88:e3:6b:e5:24:21:b3:32:47:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:41:A7:18:6C:53:53:BD:B4:D9:B4:96:74:F6:7A:11:90:8F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b4:43:47:76:8a:fc:88:42:39:34:a3:23:eb:f4:87:e4:93:
         ed:6b:87:18:f2:58:ff:2f:40:f6:e1:c4:96:96:26:99:05:05:
         fe:9f:cd:f8:f5:4b:a7:12:07:4c:7c:30:de:dc:0d:fd:2e:eb:
         cf:66:fe:fc:96:e8:24:d3:51:bb:ae:ca:55:5e:fd:e8:0c:7e:
         fe:26:8a:c6:c5:a2:a3:9f:9a:b6:de:ed:ed:d3:70:fe:90:62:
         7b:e7:db:88:ef:9b:77:bc:4e:67:9d:f2:77:35:b2:1d:c6:2a:
         59:d5:a9:6e:1d:63:44:85:ee:a4:01:da:d6:5c:93:29:b9:8b:
         68:63:7f:16:83:06:15:47:ff:12:53:73:8c:3b:78:69:ff:aa:
         f5:14:20:79:be:78:eb:22:57:6a:f5:7d:90:cb:22:f5:71:cc:
         a3:27:c6:a0:03:77:a7:14:58:f4:46:36:97:e2:64:83:50:55:
         bd:de:1b:79:ce:0d:c5:fb:56:ca:7c:fb:33:2d:b2:65:93:e9:
         62:f1:86:4c:45:02:10:45:ba:e0:5a:2e:dd:a2:6b:d9:98:e6:
         2d:56:8f:51:85:59:aa:d9:64:27:ec:4e:88:fa:79:c4:6c:b0:
         e8:1b:e1:24:bc:53:28:8f:33:4a:49:df:40:59:d3:c8:27:56:
         2b:33:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:18:52 2025 by rpki-client