Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d8077dec-30d8-3d1c-8bf4-4d6ad5f6bb83.roa
File:                     d8077dec-30d8-3d1c-8bf4-4d6ad5f6bb83.roa (raw, json)
Hash identifier:          TWBw7O2npBw+pH9D8qjGt2Y9wACDuxuO3Uv2Z5v2Kek=
Subject key identifier:   18:02:38:4B:B1:67:44:58:18:20:4F:28:A4:C2:29:C8:01:28:63:E4
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB537A47D53734642184C0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d8077dec-30d8-3d1c-8bf4-4d6ad5f6bb83.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:53:7a:47:d5:37:34:64:21:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=68b17447-78c9-4eae-8fab-a5337a9040bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:19:91:5a:74:b0:f5:5c:38:f4:99:7f:7e:e6:
                    64:4f:55:0e:6d:68:cc:de:ec:ff:77:66:f0:78:8f:
                    8e:b3:19:88:b1:b8:c3:3f:f0:56:4a:89:cb:77:0f:
                    a5:17:62:a0:8c:fa:65:a0:f3:3f:de:14:06:95:e2:
                    d9:34:f0:d0:fe:9d:f3:66:2e:e3:f5:b3:d8:9c:8c:
                    3c:b9:25:0b:e2:69:5f:37:4b:3e:29:e2:d4:bc:fd:
                    14:a0:00:06:c4:aa:5a:fa:ec:64:78:42:bb:13:49:
                    7e:92:56:0f:bd:70:79:1a:47:a0:53:35:2a:ad:e6:
                    7a:ff:d0:ba:70:c9:56:22:49:6f:00:03:09:40:b7:
                    a0:3b:57:8d:d8:3d:d0:ba:e9:a6:21:0c:0f:37:26:
                    79:51:5d:92:92:ca:b7:ca:86:83:a8:06:52:67:50:
                    b9:ea:89:2f:3e:92:5e:8e:49:5b:13:16:5b:8a:f2:
                    98:3f:fa:04:07:f1:03:cf:b5:b6:21:10:45:ca:f8:
                    93:b3:f4:20:e9:90:6c:4f:69:8f:5c:ab:b8:23:16:
                    db:e9:91:d4:d5:b2:3a:b2:2e:d2:24:80:0d:f6:1f:
                    dc:51:4c:ed:86:96:6c:8d:36:8d:6c:91:1d:6e:b2:
                    15:d4:90:73:b3:64:e0:c0:2a:52:8e:43:38:6c:33:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:38:4B:B1:67:44:58:18:20:4F:28:A4:C2:29:C8:01:28:63:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d8077dec-30d8-3d1c-8bf4-4d6ad5f6bb83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:99:16:3d:99:a4:da:24:2d:9e:8f:53:3b:f0:14:4f:a4:
         c6:3d:2f:8f:25:7f:98:e2:a4:1d:ed:dc:d9:5e:eb:f2:2f:90:
         92:16:7f:03:4c:f6:df:96:8b:c4:89:ae:b5:51:3a:5b:82:55:
         d2:e5:17:19:1e:5f:f3:80:4a:b4:b0:df:09:fe:1f:36:2e:12:
         46:4d:b3:35:c5:96:80:e6:10:ab:b8:38:35:1c:a0:87:58:96:
         59:2a:89:11:01:07:40:a9:01:47:76:d8:5a:b3:39:1d:6a:4f:
         44:ff:e0:26:f9:05:01:da:37:9a:a8:15:0e:53:77:a9:24:20:
         cf:14:57:6a:46:ff:f7:04:61:76:67:cc:19:b4:54:82:13:a0:
         0f:3a:0c:0c:d1:09:a0:f8:5c:67:8d:d9:44:58:3c:69:bb:55:
         7c:ff:e8:c1:92:83:d5:f7:8e:8f:61:8e:df:30:e9:29:e1:04:
         52:e1:48:6e:e8:a6:b6:4a:97:08:b2:d5:06:ec:b7:ab:cf:f8:
         38:d8:34:52:bb:78:f0:ee:d3:93:39:f6:bc:ee:10:8f:98:af:
         2d:e0:af:78:0a:b9:16:b7:7a:45:55:f9:3f:4e:52:9e:eb:1b:
         4e:48:e2:34:66:fa:35:e2:19:5c:86:71:ad:a8:18:73:d0:aa:
         df:9b:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:08:22 2025 by rpki-client