Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d184b1bb-cf23-3e4c-8825-976eea7cdf86.roa
File:                     d184b1bb-cf23-3e4c-8825-976eea7cdf86.roa (raw, json)
Hash identifier:          ZWMpcReiGu4VGz9Fh11ZGql+8cvutFfahwCvea+ctLY=
Subject key identifier:   F4:6A:4B:6C:C5:C0:56:B8:CC:60:C0:AD:74:4E:3C:0E:B5:19:0E:A1
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584A1F9021A180A663762C158580
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d184b1bb-cf23-3e4c-8825-976eea7cdf86.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     399275
IP address blocks:        165.140.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:21:a1:80:a6:63:76:2c:15:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=d50ad9f4-30c6-4dbf-8e80-27934de1aa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:de:53:30:41:6e:68:66:24:d2:67:92:80:
                    b6:5e:7f:7a:e2:65:b9:98:f0:f3:7d:a9:0c:45:fc:
                    59:5d:a4:77:a0:9c:d0:eb:72:85:09:9c:d8:af:dc:
                    b8:39:10:76:03:24:47:b8:f6:5e:ed:53:3d:9c:22:
                    af:19:e5:e0:47:86:f8:58:ac:45:5f:f7:62:ee:59:
                    26:63:0b:35:ee:a0:72:25:92:da:68:1b:de:49:31:
                    fc:54:09:82:ed:b2:14:01:b8:0a:a4:bf:1b:bb:79:
                    01:68:e9:34:ef:55:02:b6:5f:e9:20:c6:2a:cb:7e:
                    34:f8:e6:db:2a:61:24:5f:c3:2f:e2:5e:3b:84:80:
                    77:36:29:26:aa:50:e9:99:3a:1e:6e:b1:59:db:de:
                    bb:2a:83:6b:85:2e:47:0c:54:f5:10:5a:86:49:7b:
                    e3:a6:0e:b3:d9:88:92:60:13:5e:19:14:e2:d5:d1:
                    39:2c:68:01:7a:4f:a6:ae:e8:ce:f5:61:0e:f9:1c:
                    b6:22:36:fb:97:54:3a:ae:75:6d:e5:66:ea:b5:f9:
                    3b:c6:3e:05:a7:de:67:0c:f1:47:62:60:24:0c:36:
                    bd:bb:b8:6e:65:5e:55:25:15:3b:71:04:fd:0f:d5:
                    0f:fa:4d:ab:37:1b:cc:ee:87:b1:7a:b5:b4:c0:c5:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:4B:6C:C5:C0:56:B8:CC:60:C0:AD:74:4E:3C:0E:B5:19:0E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d184b1bb-cf23-3e4c-8825-976eea7cdf86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:3b:ef:9e:c1:e9:f7:47:a1:cb:b5:d3:8a:c8:d1:ac:67:
         24:3a:66:db:15:8b:b3:6d:80:c3:5d:e3:f6:ff:da:50:e1:33:
         28:66:f1:e1:33:f7:70:5e:2e:25:10:fa:fb:d6:5f:81:bb:a0:
         02:17:68:be:88:f3:69:91:8f:9a:7b:0f:a8:5e:95:fb:f6:86:
         92:64:da:65:30:30:c0:7a:d6:ad:2a:74:8d:03:10:14:7c:55:
         c2:99:b1:bf:d2:75:cf:ed:5b:0f:d8:99:50:fe:4f:85:a3:c4:
         c1:fc:34:c7:e8:37:97:4e:c6:76:6b:30:5e:c4:81:41:8b:17:
         0d:93:f1:da:9c:b5:e4:c1:9d:84:b0:f7:0d:82:ad:66:5f:70:
         71:9e:29:0d:26:ee:e0:a0:b4:a6:38:5f:86:f8:7e:a6:c7:91:
         bb:94:f1:f4:90:32:5f:af:97:a5:44:c4:06:82:c8:a8:c3:50:
         0f:e1:13:30:7d:8b:e3:05:30:b4:aa:8d:da:ad:ce:8c:df:7c:
         cc:39:53:a0:99:cc:bf:5e:97:5a:e3:2f:63:b7:f0:7c:c5:6c:
         a4:95:e2:5b:3a:cb:05:f0:71:ea:34:67:ad:6d:85:9e:6e:a8:
         69:c2:35:4d:ed:3e:04:96:60:cc:45:db:4e:3f:03:57:be:ee:
         01:2d:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:09:55 2025 by rpki-client