Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa
File:                     2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa (raw, json)
Hash identifier:          QwLeqnCtCGODXn8f4jktkUuPIn+f05q1RaOsrCiceTM=
Subject key identifier:   7D:3F:47:07:30:B9:95:CC:AA:81:E1:96:31:46:92:6C:85:F3:F0:4D
Certificate issuer:       /CN=b02b5a1e-c575-48d8-ad0e-3a3e1d032110
Certificate serial:       010D0C9F4328584A2ABACEE8F8911F9560535000
Authority key identifier: 2B:8B:68:E9:63:83:9C:CE:62:11:46:CC:6B:97:61:91:F7:0D:EB:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     31830
IP address blocks:        192.40.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ce:e8:f8:91:1f:95:60:53:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b5a1e-c575-48d8-ad0e-3a3e1d032110
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=bc4d4a5b-c8b8-4c9c-b879-49775f4d4f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:7d:40:9c:ba:d1:98:0b:7b:99:50:8c:2f:
                    d4:74:d9:8c:1a:01:04:e9:d9:76:5e:68:d5:3e:1a:
                    c7:88:a0:2d:a9:68:52:25:a7:57:52:f5:57:7a:83:
                    50:99:a3:80:81:30:cd:f8:6c:fa:40:df:cf:76:0f:
                    2f:69:82:a4:5b:e4:6f:5b:60:31:6c:66:8b:33:ff:
                    b2:fd:b6:11:a7:c5:09:6d:ab:ac:df:88:18:66:eb:
                    21:13:4b:c2:11:88:fb:c6:2c:51:a9:b3:ed:1b:60:
                    75:88:ff:2e:69:5f:71:b3:ef:f8:c9:06:1a:a2:ae:
                    8b:45:ed:72:d1:ba:f1:ae:c9:5d:67:e8:7f:cc:57:
                    bb:eb:df:a6:e3:b9:7c:e8:41:68:f4:6f:62:50:f4:
                    fb:ad:de:05:5a:52:93:a3:08:f0:21:80:de:05:b0:
                    ec:81:7e:7d:3f:f8:c2:fe:e6:c9:ac:ca:48:19:75:
                    b9:3d:40:1e:d9:a5:a4:43:18:85:85:13:c2:f5:d1:
                    96:4a:27:60:c7:ae:05:e8:d3:e0:e8:78:09:a5:f2:
                    1e:ff:de:01:c7:04:f2:8d:39:55:c3:29:17:f1:ef:
                    49:99:81:7f:e5:96:33:33:07:84:e2:e9:72:c6:89:
                    ee:eb:9a:58:4d:df:5c:39:97:14:91:cb:ee:8d:97:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3F:47:07:30:B9:95:CC:AA:81:E1:96:31:46:92:6C:85:F3:F0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.crl

            X509v3 Authority Key Identifier:
                keyid:2B:8B:68:E9:63:83:9C:CE:62:11:46:CC:6B:97:61:91:F7:0D:EB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:b1:33:18:5b:e0:69:1a:9b:2f:da:2b:f4:e5:de:4c:64:
         ee:a5:7e:cb:e8:87:cd:c9:12:fe:71:3b:69:d0:ae:14:f9:1f:
         4a:9e:cb:fc:be:7b:b5:d0:61:c9:65:d2:89:56:9e:2f:12:9d:
         a7:0c:dc:3b:0a:c6:76:ec:ee:ec:94:69:34:56:fc:d9:58:04:
         5e:47:4e:3c:46:44:9a:cb:ed:06:d9:c9:e9:1c:4a:54:44:78:
         74:5a:4b:ff:2f:49:ab:55:f2:68:1d:af:41:58:28:37:6c:e5:
         a5:2d:35:35:b3:00:b1:93:ee:81:90:4b:1b:9c:64:70:ec:1e:
         89:86:6b:ab:54:d9:d7:18:08:55:68:cb:0b:12:fc:06:c8:ae:
         8b:e9:73:4d:99:0c:38:17:f9:01:0a:96:f8:5b:6d:b8:88:1e:
         8d:ae:75:13:99:5e:79:81:6b:46:33:81:d9:f8:35:78:12:a0:
         6d:90:56:af:ce:0c:41:e6:ba:e5:aa:79:00:b0:44:bb:cd:01:
         1a:53:4a:26:ef:b0:e7:e2:99:3d:27:30:8c:fe:ae:e5:6f:df:
         0d:cf:65:0b:ba:e8:b9:f2:d0:4a:32:f1:b9:69:93:73:63:08:
         bc:e7:b9:56:0a:d3:ec:38:42:a5:f8:32:05:94:aa:bd:00:fd:
         af:61:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:38 2025 by rpki-client