Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5cca0a7-ccc7-3792-821b-bcba179487f5.roa
File:                     c5cca0a7-ccc7-3792-821b-bcba179487f5.roa (raw, json)
Hash identifier:          Mx//7efkjLMKxNHGq/V5MkF0FzKUTE55sXglEjT/vz0=
Subject key identifier:   BF:D8:4F:14:71:8D:73:58:94:B3:CA:B1:F2:65:A2:1F:0B:E1:B8:23
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B16D06439048759B191353040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5cca0a7-ccc7-3792-821b-bcba179487f5.roa
Signing time:             Fri 05 Sep 2025 02:35:22 +0000
ROA not before:           Fri 05 Sep 2025 02:35:22 +0000
ROA not after:            Thu 04 Dec 2025 03:35:22 +0000
asID:                     396982
IP address blocks:        136.119.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:d0:64:39:04:87:59:b1:91:35:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  5 02:35:22 2025 GMT
            Not After : Dec  4 03:35:22 2025 GMT
        Subject: CN=f5e053b9-140b-4f64-b69f-e46f58f1f658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:af:c0:f6:b4:73:db:3c:94:de:23:b2:ce:
                    32:56:9f:94:44:3b:0f:4c:75:0d:77:77:f0:af:d6:
                    7a:02:bf:d7:e5:7b:7c:2d:6f:23:32:7a:69:df:1c:
                    17:8c:c9:57:9d:c9:24:13:14:74:48:fd:73:bf:ea:
                    53:db:a9:08:4a:c7:f2:c5:ef:db:80:c6:ab:2c:2f:
                    2d:57:03:62:0c:48:cd:4e:70:21:18:8a:a5:c0:8e:
                    80:15:77:76:4f:56:37:ef:6c:36:ce:57:98:88:c5:
                    58:86:20:f4:9e:84:3f:6d:a5:21:25:d8:6d:2d:04:
                    8a:a0:fd:f8:62:ee:66:54:96:cc:60:8c:d0:cb:8b:
                    09:9f:5a:16:0b:96:a5:69:f9:0a:bb:61:d2:a8:d6:
                    13:06:0e:b1:91:ed:57:69:db:ab:87:2b:93:a5:30:
                    ee:71:3e:83:13:10:a5:20:1a:34:cf:85:5f:78:6e:
                    48:61:1a:bf:7f:79:07:9c:68:7a:3c:20:e5:65:a2:
                    ad:98:69:d7:63:35:6e:f0:6e:3c:e1:05:bc:02:24:
                    0d:1b:89:37:5e:9d:02:9d:2d:18:73:c9:85:54:c8:
                    f2:ce:f8:a5:86:9c:c1:48:91:c6:4f:fb:b1:43:55:
                    01:02:e0:4f:c4:d3:87:91:bd:70:c7:72:f2:43:e2:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D8:4F:14:71:8D:73:58:94:B3:CA:B1:F2:65:A2:1F:0B:E1:B8:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5cca0a7-ccc7-3792-821b-bcba179487f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:ed:67:d5:7a:ee:81:7e:73:f1:4c:62:06:18:27:46:85:
         a5:9b:39:d5:fb:e3:14:ec:84:33:d9:a2:36:ca:d9:43:30:59:
         f2:f1:ce:5c:ed:94:ac:44:45:c7:1f:0c:02:ef:01:1e:0e:51:
         37:46:24:84:3e:ed:8c:fc:14:e5:27:87:6a:19:ba:9e:75:41:
         dc:1d:29:0e:59:b9:e5:2c:13:fb:81:b3:ae:73:80:11:d2:2d:
         28:a4:0f:9a:3b:ad:61:c2:50:ad:4c:25:6a:e8:fd:c0:7e:f9:
         d7:04:6e:ec:e2:09:80:00:a2:a1:19:9d:8e:32:42:ea:d2:35:
         c1:7f:3e:61:99:62:c6:11:cd:68:4e:c2:14:d8:90:db:06:68:
         03:3c:2b:c0:74:d2:c9:ce:78:0b:63:d8:65:90:44:a2:d3:af:
         5d:9a:84:d2:e8:53:c6:d2:ca:8b:f5:39:5f:8f:ed:85:d9:8a:
         01:7c:fa:cf:7d:d5:91:fb:22:e3:1b:2f:df:75:af:f0:e1:4a:
         1b:0d:d8:f2:76:7f:f6:1e:62:41:87:f8:38:9e:1f:c3:1a:ca:
         9a:a6:c7:b3:23:67:29:78:83:a9:4e:f3:8f:8a:35:b6:47:84:
         3b:95:09:17:37:29:19:c2:47:9b:09:87:db:5c:c9:35:ee:91:
         2a:16:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:24:14 2025 by rpki-client