Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
File:                     611240e0-65a6-3754-a0a6-84e5e23b35ff.roa (raw, json)
Hash identifier:          dXpNphbc7hlVwe8/r/7QyceLoDBVfKkvI0o/9jcd81s=
Subject key identifier:   A3:F1:4E:65:7B:87:BC:BC:8D:6A:1E:4B:3B:E6:46:D3:3C:29:C7:21
Certificate issuer:       /CN=3d7c7699-15af-4ea4-8825-93e2f116691f
Certificate serial:       010D0C9F4328584A6DBB46B66F8737CF4236F480
Authority key identifier: B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     376
IP address blocks:        199.84.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:46:b6:6f:87:37:cf:42:36:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7c7699-15af-4ea4-8825-93e2f116691f
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=47806557-c811-49e3-9e18-8a4c1bdacdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:e7:04:1a:8e:5a:9c:46:81:e4:b7:f7:ea:
                    5c:66:4c:f0:46:6d:f2:85:38:5b:cd:fb:71:1c:c9:
                    a4:0c:de:2c:3c:0f:ce:0e:25:7d:c5:d7:40:82:1b:
                    8a:9f:1f:54:81:5a:78:1f:21:c8:22:7c:79:fc:5f:
                    a5:62:96:b2:52:56:26:62:20:e4:90:72:c5:5b:22:
                    35:a6:f8:d7:b8:46:7b:06:6d:d4:37:42:04:12:2a:
                    62:4e:bc:7c:62:5e:5d:dc:6d:72:e0:55:58:36:a0:
                    63:d1:b5:71:a6:7e:a2:c6:2d:bf:81:2e:cf:5a:55:
                    c2:3a:3e:9b:e6:d1:c9:d3:c6:e6:7c:7c:b7:3d:bd:
                    b9:b6:d0:e0:9c:0b:31:53:c4:37:d6:a9:8c:32:f3:
                    9b:04:aa:70:65:78:36:ca:f1:49:de:ac:36:c6:b9:
                    de:f0:65:9f:ce:6c:c8:54:45:1f:b8:ce:04:62:50:
                    20:c7:2f:0f:b6:ef:6c:de:d2:7e:e7:4b:f1:f4:e6:
                    33:90:ce:d1:f6:bb:56:4f:57:b1:e2:7c:ac:bd:fc:
                    fb:96:8d:ac:69:0e:8f:9d:ad:38:52:0b:d2:9a:ea:
                    ed:70:25:4a:8b:01:8f:f8:67:a0:b6:7b:0b:83:4a:
                    d2:b4:b8:f5:12:a7:58:0c:20:90:75:b5:84:60:2f:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:4E:65:7B:87:BC:BC:8D:6A:1E:4B:3B:E6:46:D3:3C:29:C7:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:3b:3b:f0:56:72:8c:97:7e:5b:78:53:77:b6:02:be:7c:
         f7:0d:4d:08:28:5d:53:11:b1:fd:b4:7c:fd:9b:6f:b9:01:9b:
         8d:87:27:a6:d0:c2:0e:c3:29:b9:89:d1:a8:17:11:60:31:78:
         6f:73:11:78:f8:e0:d6:dd:68:66:7a:d3:88:d9:00:6e:10:40:
         95:df:ca:85:69:7f:b2:74:eb:fc:bf:0a:44:e5:b3:3d:fb:06:
         1c:69:2b:62:4d:22:f6:07:64:36:61:98:47:86:55:2c:21:c0:
         9d:8c:1a:8f:7f:b4:5e:ce:8c:7c:9a:da:3c:0d:7e:3b:f4:a6:
         b1:e9:24:05:09:9f:27:31:b1:f3:6a:a1:f1:c1:f9:54:f4:7f:
         1d:55:90:52:c4:bb:bf:ef:8d:40:23:0d:8e:79:76:26:62:88:
         32:fe:97:9f:3c:b5:a4:69:c8:e3:97:40:83:76:4e:cc:64:f4:
         ed:ef:fb:af:85:91:26:c5:54:49:58:3b:d0:d9:07:de:1f:9a:
         54:df:62:55:fb:02:0f:eb:f3:12:48:7c:c8:14:41:0d:f1:ee:
         20:a8:3a:06:0f:ab:3c:d8:39:2b:d2:13:fe:df:00:fc:d8:4f:
         64:61:03:02:4a:60:d8:c8:ac:d5:11:75:56:b6:47:da:c6:67:
         53:27:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:03:02 2025 by rpki-client