Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
File:                     86f93181-bd05-3575-8aa4-a212bd3e92ab.roa (raw, json)
Hash identifier:          M20wZOiftL1ygpLhvub1JrqjHdmYw51Otd0o8NYk5TY=
Subject key identifier:   01:7F:83:5F:BA:44:B6:84:F9:C6:97:AC:AA:6E:CE:9F:15:DE:33:D0
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584A8575FEB03D36DF6D3AB37240
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     28753
IP address blocks:        172.84.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fe:b0:3d:36:df:6d:3a:b3:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=891e6ab8-1850-4981-b5d4-9944560505da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:c8:5d:4e:09:73:27:51:cd:21:8a:e7:a5:
                    19:7f:9b:52:6d:17:25:18:f4:b0:a7:c1:12:00:13:
                    64:6a:c6:00:5f:15:ae:64:b8:ca:86:39:0f:6d:9a:
                    92:35:8f:a9:4f:2c:e7:41:7c:10:b9:4f:28:6b:ac:
                    56:09:4f:b4:f1:39:f0:81:74:61:5c:5f:85:9e:4c:
                    bf:3d:40:0b:8a:80:17:13:f1:ff:be:6c:26:02:c2:
                    14:b4:8c:ae:a0:56:89:14:0c:dd:0e:de:97:69:e9:
                    1f:67:db:cd:dd:f4:21:cd:a0:f8:9d:99:3c:9a:8b:
                    60:a1:59:5e:7f:bb:69:5f:f6:65:98:5f:73:45:50:
                    20:de:15:d2:b1:57:38:e9:15:c1:f6:04:34:01:bf:
                    12:c5:04:33:3d:30:53:a7:0c:dd:11:d9:de:32:49:
                    44:21:18:3d:1f:e6:76:28:17:2d:a0:bb:36:10:ea:
                    32:7f:57:75:93:bc:75:fd:e3:4c:ea:54:53:f3:e9:
                    05:5b:83:19:08:67:c2:86:54:47:c6:6b:1f:a6:09:
                    69:09:be:a3:75:f1:9d:d0:05:d2:dc:d8:5f:2f:f5:
                    e5:88:de:d5:9e:85:d8:57:01:4e:9f:24:74:20:78:
                    8a:c1:be:90:a9:5d:06:06:8f:e8:5c:36:31:cb:2c:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7F:83:5F:BA:44:B6:84:F9:C6:97:AC:AA:6E:CE:9F:15:DE:33:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:86:c2:d0:60:82:30:c2:d2:48:be:df:e5:bf:22:21:40:28:
         72:e2:85:84:1b:2c:b4:5e:8e:86:24:3a:d4:e6:81:a8:da:22:
         b5:d8:64:a5:7d:d2:0c:5d:bc:20:54:c4:ea:a5:56:05:4d:8b:
         c2:5d:97:e4:2b:48:73:d5:a0:90:43:0d:73:b9:60:28:d8:61:
         de:5b:38:be:b1:0c:3a:f8:87:e6:af:3b:e5:3b:e1:b1:bd:48:
         77:e5:31:e3:20:8b:d6:ee:73:86:cd:fa:8a:a2:44:3f:0d:3d:
         ac:c3:7a:ae:0d:04:55:63:f3:d3:e6:d2:96:61:b5:8e:47:a4:
         91:59:a6:10:97:5e:25:44:c4:3e:2e:54:10:80:df:b5:25:c6:
         60:ba:7e:05:ce:b5:50:be:89:29:77:b6:9f:2f:0f:b8:7a:a8:
         1a:07:3b:94:b4:d8:f4:74:27:51:57:7c:68:ae:4c:67:7f:d1:
         65:27:bc:26:46:4f:4e:a8:54:f0:ea:72:15:c6:41:0d:34:03:
         7c:05:76:85:6a:c4:c3:26:8b:b8:77:77:97:53:2a:9c:f0:97:
         1b:af:ee:a3:0c:18:ff:2c:0c:9a:d7:cd:90:d9:91:a8:c0:50:
         9e:de:9c:38:9d:4d:ea:d1:c6:21:ea:c0:64:98:48:c5:f3:81:
         d7:07:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:14 2025 by rpki-client