Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/bea214d3-1b7e-3ec2-bdcc-7a71c880860d.roa
File:                     bea214d3-1b7e-3ec2-bdcc-7a71c880860d.roa (raw, json)
Hash identifier:          J6OqgmzZZaFIpH4Id2VY98YTpsrlBcy+yWHuqqavzbc=
Subject key identifier:   34:2D:5A:BB:8C:E5:F5:5E:66:FC:EB:D1:8E:AE:4B:AF:E7:D5:E0:7F
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584AA1621CC67EF819EDD992F780
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/bea214d3-1b7e-3ec2-bdcc-7a71c880860d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     834
IP address blocks:        165.140.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:1c:c6:7e:f8:19:ed:d9:92:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=6a3789a6-613f-437c-a773-716fc4b166eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:94:58:cd:cf:c4:bc:03:2b:dd:f2:f9:6e:
                    58:09:dd:60:7c:80:6e:85:14:c0:17:ba:96:9a:52:
                    e9:96:2b:ed:eb:01:bc:fd:43:92:92:45:65:f7:99:
                    00:6a:1b:8c:59:54:00:b9:6a:ea:ac:7c:fb:19:68:
                    16:78:37:83:22:7e:a0:18:4c:00:e6:ea:87:9f:7e:
                    b3:7b:ff:7c:41:9f:99:a2:c9:0c:ab:aa:52:fe:07:
                    ee:50:46:09:48:cc:64:eb:d3:d1:5f:e0:c3:6a:a5:
                    0f:ac:4e:a7:2e:97:5f:8c:89:54:32:21:0f:38:1f:
                    84:73:63:61:79:7a:8b:6d:f5:60:24:89:ac:9d:69:
                    d0:80:a4:ee:00:25:be:18:64:3c:58:23:dd:c7:7c:
                    f3:d6:23:f9:eb:b4:41:2a:a5:0a:58:54:51:3e:30:
                    a9:25:38:38:42:ae:8c:4a:4c:ec:17:3a:1d:0d:af:
                    79:89:04:79:13:2c:86:3a:19:9c:4e:16:69:6f:72:
                    15:f0:09:f6:1c:4d:f5:b6:dd:d9:f6:5a:3c:ad:5d:
                    4a:71:c8:7a:f7:67:2c:38:8a:72:9a:0d:94:ef:47:
                    f0:7c:ed:7f:a1:fc:ab:39:9a:3a:90:a0:17:77:e5:
                    69:e0:fd:b7:c2:c8:5e:51:56:44:51:80:60:21:cf:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2D:5A:BB:8C:E5:F5:5E:66:FC:EB:D1:8E:AE:4B:AF:E7:D5:E0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/bea214d3-1b7e-3ec2-bdcc-7a71c880860d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:9d:53:5d:23:a2:42:9f:79:c2:a4:4b:d0:fd:fc:61:21:
         28:68:d6:b2:40:eb:3a:10:f5:98:2a:97:f6:b4:ee:28:37:1c:
         30:7d:18:9c:46:4c:f3:03:fa:ad:6d:d0:16:e1:6e:52:2c:b5:
         00:45:7f:2f:af:f4:3f:77:b7:14:de:e0:b3:77:31:3b:d7:93:
         4a:49:06:6d:07:a8:fe:db:73:28:f9:5b:da:3f:0e:a9:39:5d:
         fc:fc:63:53:94:91:36:8a:fe:bf:3c:ba:08:11:72:31:b4:5e:
         b7:1a:e3:29:df:20:7f:f4:ad:12:93:a7:19:ae:90:c6:54:ed:
         3e:b3:68:36:5b:13:3a:18:4b:f7:73:de:40:c9:b2:90:92:e3:
         b0:a4:ed:c7:62:ba:8f:28:81:ed:60:8d:51:49:d8:88:c0:4e:
         49:ac:40:37:3c:df:b4:4e:0e:86:61:ea:28:44:09:c8:62:a8:
         8d:e1:4b:ec:1e:fb:cf:38:74:2c:77:bb:3b:30:c1:7c:47:8e:
         5b:e5:5d:fe:ff:a2:f2:0b:03:0a:8b:3a:6c:ac:38:44:97:80:
         e2:e0:c2:38:ee:ec:9f:64:41:a8:1d:04:fe:6f:93:4d:c2:27:
         b8:c7:97:ba:af:40:06:73:e9:8b:c0:be:07:b8:d2:07:d6:2c:
         c9:03:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:34:44 2025 by rpki-client