Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa
File:                     c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa (raw, json)
Hash identifier:          ZedMG1KQg+sVQLmO5nilcb9JBACJGeMxrCoCYQLaV8Q=
Subject key identifier:   F0:B4:ED:AD:2E:A1:E9:95:B3:C9:FB:88:27:07:9C:DD:0E:10:24:5B
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584A5E6063F0516FAD805F2AF240
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     54994
IP address blocks:        157.185.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:63:f0:51:6f:ad:80:5f:2a:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=01a077f8-b6c9-4d9b-bca4-09d35cc1d236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:42:0f:dc:02:80:46:7f:12:4c:53:41:9b:
                    be:a2:3e:d7:34:f2:ed:4a:df:22:54:2a:7d:6a:95:
                    82:35:35:ef:b0:2a:22:22:09:c2:10:ff:d7:1a:88:
                    43:f0:a0:e6:17:e3:98:fe:59:50:5a:f3:21:cd:09:
                    a3:f8:ce:60:0c:af:25:b5:bb:eb:e3:95:b8:79:16:
                    7e:50:eb:42:b5:6a:24:86:9b:f3:63:47:17:7a:3e:
                    58:08:1e:3b:d6:be:62:c7:d1:30:b2:8b:06:66:ee:
                    75:db:32:45:32:dd:57:54:df:fc:0b:5f:0b:e1:a9:
                    4a:b3:d6:3a:91:89:12:e8:11:c0:81:67:df:eb:e6:
                    12:0e:6d:e5:7a:71:f5:20:f0:5b:aa:7d:08:0a:9f:
                    2f:58:ad:fb:5c:4b:04:f4:af:2a:19:7a:e4:ca:f8:
                    62:b5:4a:c3:11:3c:c9:84:cd:87:ba:10:89:98:59:
                    a0:e7:fe:09:e0:17:2e:47:d3:14:f5:50:68:de:7b:
                    13:55:6f:05:b0:b3:c3:8e:f0:d3:46:2a:7a:9c:f8:
                    0c:b8:b4:60:5a:de:64:37:f2:80:11:19:41:bc:8e:
                    8e:96:9e:22:9a:54:0b:d1:b8:fe:bd:94:bb:51:f8:
                    5a:1f:ee:0b:57:b9:19:b3:9e:77:3e:c7:58:df:7f:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:ED:AD:2E:A1:E9:95:B3:C9:FB:88:27:07:9C:DD:0E:10:24:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:33:54:ea:3f:fb:30:e6:73:a0:30:21:53:48:cb:46:81:
         10:76:40:35:d8:20:4e:59:56:06:7b:08:f5:68:68:e5:e7:26:
         d9:1f:95:2d:99:62:d4:19:63:6d:88:c3:08:a8:83:83:75:20:
         39:16:41:3d:d0:b2:ad:2c:27:09:1f:d6:c6:ba:7e:15:c8:6c:
         16:60:22:a5:ea:7c:f9:16:e2:f4:c2:c4:0d:32:cf:93:ce:db:
         78:d9:4a:a5:32:d6:49:64:d0:d0:5f:d2:df:76:4b:c4:59:c9:
         f6:18:0a:d2:ad:85:c1:f2:53:fa:b6:2f:ba:bb:a0:04:0c:2a:
         a7:31:25:b0:57:df:8e:aa:85:3f:57:06:80:83:e2:82:a6:98:
         a6:30:56:b1:c3:6d:ee:a8:e7:81:e3:ba:23:6f:cf:27:87:28:
         56:2c:bc:70:04:ce:8c:1b:dd:76:ed:52:f5:61:9d:43:95:d4:
         c3:37:3a:54:3f:c9:cb:6d:67:5e:6b:68:ac:8b:1f:8b:91:84:
         5a:d2:49:c4:d4:2f:6a:99:33:05:55:02:90:19:2d:3b:eb:ac:
         87:cd:3d:66:1f:9f:d4:92:3d:e4:51:8e:4c:32:64:fa:13:ef:
         df:0b:66:4d:66:ca:58:a1:33:47:2b:30:eb:29:c7:5a:ea:f0:
         97:da:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:37:16 2025 by rpki-client