Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
File:                     f8faf337-6f56-36aa-80e4-1bee07bbb914.roa (raw, json)
Hash identifier:          7j0YErDXJo1w52ULmLJYtBcUPUShuw+ZFJmpI1LIxb0=
Subject key identifier:   ED:4D:E0:28:23:F6:92:73:1C:37:84:46:07:41:90:3D:CA:3A:9A:BB
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB53075DE529CD0D9CA000
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:53:07:5d:e5:29:cd:0d:9c:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=9b671528-2a83-4096-b517-714995275753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:88:5c:04:e5:bf:a1:fa:52:f8:71:f4:ac:
                    6c:8f:6b:1f:c0:96:9d:88:81:a2:4d:64:52:19:77:
                    d3:06:d7:3e:ef:76:77:56:28:ea:ac:a8:a9:c2:90:
                    7c:13:83:e6:18:56:29:e6:d6:c0:ad:ee:ef:89:74:
                    bf:61:c5:d5:1a:35:2b:4f:56:92:e2:d8:19:fe:15:
                    34:ef:59:b5:a4:76:79:30:7b:42:56:2c:2f:f6:2d:
                    e0:da:11:f9:d1:1c:14:41:83:da:90:ac:a1:5e:58:
                    cd:93:1a:f5:89:55:fa:ce:b4:d9:00:46:1a:c1:77:
                    99:61:f7:7e:d2:5d:e0:35:d8:fe:07:db:35:04:76:
                    6a:91:3a:81:b1:52:21:1a:06:52:82:28:4d:9d:db:
                    ff:9c:0b:45:8b:00:be:05:de:73:4f:49:fa:1a:10:
                    41:c6:cf:c4:1c:83:20:ac:59:ae:a8:aa:0e:10:22:
                    9b:37:fb:2a:e1:d5:81:b8:f4:5f:ad:3f:dc:70:19:
                    18:a1:a1:e5:33:30:e2:87:db:a3:54:ca:de:77:b3:
                    68:0a:6d:8f:b0:8f:2c:29:f1:7b:6a:e4:8e:26:82:
                    b2:0a:59:3d:b8:18:d7:22:8a:1a:79:e8:0f:6b:83:
                    68:87:ce:f3:6f:4d:7f:c4:af:4a:16:9d:21:94:f1:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4D:E0:28:23:F6:92:73:1C:37:84:46:07:41:90:3D:CA:3A:9A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:60:fa:19:72:b1:9f:26:97:ee:ce:c4:45:18:67:01:93:da:
         c3:55:5b:53:ee:76:27:ce:c8:18:72:66:58:bc:ca:4c:7d:a8:
         e9:08:8c:e6:ad:0b:c4:ad:16:62:b5:a4:a4:9b:55:fb:70:e6:
         13:f9:5c:42:f5:05:34:22:a0:57:27:e5:f4:3e:0d:a3:e8:ef:
         b7:93:f7:14:23:5d:f2:5e:5e:17:1b:5e:48:54:09:d5:9c:6c:
         c8:1c:93:99:cc:a1:c3:6f:8e:45:32:9c:de:7e:b9:34:5a:f2:
         29:04:bb:46:79:66:84:73:6c:a4:9e:71:13:8a:52:b9:c5:a4:
         97:d5:43:00:d2:4c:3e:96:33:9e:b0:da:8a:2e:f9:12:42:61:
         15:fc:46:16:f5:75:79:6e:9d:35:60:9e:91:80:05:99:16:7d:
         d3:0d:e5:27:02:1c:62:68:45:74:d0:34:b5:a2:3c:12:a9:e3:
         87:be:3b:07:0a:01:ac:04:4d:eb:9d:e9:a4:f4:1f:18:92:01:
         97:99:32:69:d8:6d:76:bc:de:aa:f7:84:ee:dc:71:1d:cd:11:
         79:24:4b:96:a4:8a:2f:d7:eb:9c:d3:c9:38:7f:fa:5f:40:ef:
         71:4c:3f:a6:6f:67:c5:d8:ce:f4:46:de:da:3f:24:80:c0:f5:
         25:a8:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:43:52 2025 by rpki-client