Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b7f492f9-928f-39d0-a238-386068d65d12.roa
File:                     b7f492f9-928f-39d0-a238-386068d65d12.roa (raw, json)
Hash identifier:          eFL2CpxyqiNWbFSoTYPdyQN45YSsrdQd6kg1lyzxjVI=
Subject key identifier:   9D:F9:5E:9F:02:A0:86:E7:55:49:AF:58:E2:3C:15:31:78:DC:DB:E6
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584A90A0BAAE3718E40BF418AFC0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b7f492f9-928f-39d0-a238-386068d65d12.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     26383
IP address blocks:        163.123.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ba:ae:37:18:e4:0b:f4:18:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=a081f97d-e1f2-4f7a-b9e6-33ea8e46e9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:fc:75:7d:03:e3:6d:fb:15:ec:c4:49:8c:
                    79:cc:f5:d4:d8:c8:3e:f8:7f:34:85:0a:db:ea:a5:
                    1e:6e:99:ac:7b:60:5c:ea:00:83:47:23:9c:ff:81:
                    af:c6:ee:44:08:d9:06:94:5c:be:f9:b8:d7:01:a5:
                    43:a2:cf:ca:de:aa:6b:60:e9:82:d0:08:cd:47:5f:
                    e6:18:66:70:b6:14:94:6d:06:22:f6:32:36:c1:ef:
                    54:ef:f6:18:e9:6b:63:d7:18:70:74:f5:f6:c3:dd:
                    96:b5:e2:57:f2:38:74:06:56:4c:51:99:fc:71:f9:
                    b4:9f:84:29:87:b8:db:aa:d8:7d:a6:b5:f1:69:cc:
                    58:e1:3c:4b:8c:f2:ee:13:22:18:0b:ec:5c:5f:67:
                    69:c5:a4:81:cb:b0:e5:f6:d4:81:b1:23:2c:9e:8d:
                    a9:28:22:ca:93:28:02:a5:d9:b2:1c:11:7b:99:02:
                    b6:c0:34:32:36:de:60:a0:56:c7:06:9e:d5:3f:0c:
                    23:0a:cd:9f:d7:62:cf:3c:1b:38:e7:85:97:36:5e:
                    d4:7d:b5:b4:43:22:85:f2:69:6f:bf:04:1f:03:1a:
                    b6:9b:71:02:47:17:8d:c0:d5:3f:b2:f7:85:df:be:
                    25:69:66:0d:9b:a8:7b:99:6d:90:6d:02:9f:cc:05:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F9:5E:9F:02:A0:86:E7:55:49:AF:58:E2:3C:15:31:78:DC:DB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b7f492f9-928f-39d0-a238-386068d65d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:88:99:4c:f2:90:b3:b2:53:f4:60:bb:05:e9:ac:6d:33:32:
         a9:73:eb:d3:99:cf:0e:a4:97:0a:20:95:f2:a8:ad:1b:aa:f3:
         d3:56:08:0e:10:10:4a:44:bd:49:73:29:fc:21:f9:56:21:5d:
         fd:db:ec:e5:53:a3:2b:d1:50:c5:f2:ad:75:ae:19:bc:c4:6d:
         d0:63:ec:b5:05:85:5a:0e:ae:7a:41:5e:5b:80:78:ed:a0:34:
         c9:a3:78:9d:58:87:e2:1b:f1:b4:ec:9a:d4:b5:a1:5b:fb:db:
         5f:9c:31:cd:a2:81:cd:f2:d6:49:49:c8:22:c1:18:77:b7:1a:
         b2:ea:19:3d:11:7e:c7:71:fb:4c:71:5f:2b:db:ad:5b:8e:80:
         3e:7f:7c:db:de:1f:76:93:ab:35:23:d6:ab:1b:36:50:43:cc:
         38:96:b6:2a:73:95:01:e0:1c:a5:c6:3a:97:0e:3c:3e:b0:78:
         0e:dd:04:76:f3:d3:10:e8:17:17:6d:20:b1:8d:7e:bc:d9:13:
         05:7c:f7:f4:5d:6f:e3:32:fe:d3:47:0d:8a:6b:4e:d1:16:72:
         0c:16:cf:84:2b:dd:6e:53:a4:28:0d:5d:fd:ab:e5:af:58:72:
         82:b2:dc:a2:f9:6b:0b:2f:6f:10:5b:44:81:a1:81:6b:db:b8:
         dc:6e:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 13:53:24 2025 by rpki-client