Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/e82a516e-d1be-3ea9-a242-730dfe0a23e4.roa
File:                     e82a516e-d1be-3ea9-a242-730dfe0a23e4.roa (raw, json)
Hash identifier:          py/ZjDEzWQTk2hLRdmhWSGw53lKKCyrgQhkLGoeYEq8=
Subject key identifier:   45:45:3D:1F:94:B9:33:BF:67:48:AD:D2:28:23:79:7A:5E:86:EF:DE
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584B25FC2E076CCF2915292A9B00
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/e82a516e-d1be-3ea9-a242-730dfe0a23e4.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     30337
IP address blocks:        170.194.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:2e:07:6c:cf:29:15:29:2a:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=de03680d-1b74-40e3-91d0-cbdee703c8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:30:5d:23:9c:12:e9:a7:89:75:8f:b7:d1:
                    d6:d7:0d:52:c5:ae:33:62:a0:9f:ca:d1:ec:f5:df:
                    7e:d8:30:a5:58:87:e1:bd:cc:23:53:fd:72:dc:32:
                    3b:a2:10:35:68:14:59:97:5a:f8:9b:1e:f3:1f:75:
                    8f:8b:15:1c:bd:00:24:f1:77:29:56:9f:25:46:e0:
                    a3:49:54:7e:dd:cf:e7:69:8a:b7:64:e8:de:19:d4:
                    65:45:43:0f:05:5d:3f:e3:74:2d:81:bc:d8:42:d5:
                    07:c0:5d:57:b6:9e:a4:67:a7:2a:ea:f3:52:04:44:
                    e0:7c:82:00:4f:67:e9:16:91:f3:db:6f:51:a2:98:
                    4d:63:53:ea:e6:9b:63:23:08:b8:21:f5:ed:d4:49:
                    b8:66:26:37:3a:64:b1:fd:84:b8:10:e0:9d:4a:02:
                    49:82:a4:d3:02:54:34:86:5b:b6:2b:53:62:7b:db:
                    b2:14:1e:60:07:23:a0:3e:30:f5:ab:df:39:3e:f1:
                    d0:41:3c:e9:9f:1a:b2:33:0e:a5:f4:5a:34:2c:98:
                    d7:dc:0c:7c:6e:f3:15:1c:f3:66:77:b5:55:ee:2b:
                    4c:49:5a:7c:ae:41:25:91:68:4b:bb:ef:8d:50:c8:
                    ca:23:0d:50:3d:34:3c:a0:2a:7d:68:09:fb:64:de:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:3D:1F:94:B9:33:BF:67:48:AD:D2:28:23:79:7A:5E:86:EF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/e82a516e-d1be-3ea9-a242-730dfe0a23e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:2b:a0:52:1c:53:6f:70:72:ad:b4:f6:fd:95:87:dc:54:
         a9:34:9f:71:02:c6:e6:c1:7d:98:b7:49:be:35:3d:f8:26:90:
         ba:91:3a:7a:65:1b:a9:7e:ee:b5:5f:4c:65:13:89:68:58:d0:
         2a:e7:8c:41:fe:fe:f5:4a:a1:a9:9b:4e:95:0e:4c:0a:69:37:
         cf:5a:37:a8:ab:f0:3b:13:68:a5:fa:b8:2f:73:02:2d:2f:dd:
         5c:02:60:12:e9:ea:48:e8:44:47:c2:9a:4b:a4:87:40:ba:74:
         ee:05:1f:c6:a0:c8:58:66:29:a7:4a:e4:5d:d1:ec:78:d8:34:
         a3:76:6d:7b:c1:c6:26:07:e8:6f:02:00:b8:18:66:e9:28:5d:
         1f:f0:b7:50:9f:af:e9:8d:2f:31:96:77:59:4a:a2:0c:71:f0:
         3c:51:be:cc:d9:ff:0f:80:c9:3b:18:c7:fe:77:7f:e9:2a:a4:
         6e:2e:43:86:ca:18:8a:2c:e4:8d:22:99:97:0e:53:bd:60:e3:
         77:63:27:7b:1e:30:60:0c:e4:ba:aa:32:14:e4:24:ec:e1:cc:
         5c:3e:c4:57:7f:e2:9a:ee:c8:f6:aa:42:a8:dc:78:04:b7:fc:
         22:96:aa:00:a5:12:48:9c:07:45:4b:a7:6c:8d:17:24:ad:03:
         13:e0:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:21:51 2025 by rpki-client