Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4f9af96b-0de4-3b6d-92c3-860874819329.roa
File:                     4f9af96b-0de4-3b6d-92c3-860874819329.roa (raw, json)
Hash identifier:          q8GtPRwlLcvYgEIe0eBgl9F35SGT+2itkncUqqL0B5Y=
Subject key identifier:   2F:D3:97:57:4F:3B:0A:18:8A:A2:54:5D:3F:5A:D7:FF:61:4B:77:4D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00B61AFF1C274D7FA7A78
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4f9af96b-0de4-3b6d-92c3-860874819329.roa
Signing time:             Sun 03 Aug 2025 02:35:49 +0000
ROA not before:           Sun 03 Aug 2025 02:35:49 +0000
ROA not after:            Sat 01 Nov 2025 02:35:49 +0000
asID:                     62044
IP address blocks:        170.85.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0b:61:af:f1:c2:74:d7:fa:7a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:49 2025 GMT
            Not After : Nov  1 02:35:49 2025 GMT
        Subject: CN=506a7cb3-d98c-44e3-98f8-946171652dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:b4:f7:e7:69:3d:87:23:1c:73:58:52:a5:
                    1f:ec:bf:95:1a:02:25:88:f2:7a:59:b0:2c:c2:d8:
                    01:b4:2f:85:f2:80:a7:b1:53:3e:14:1c:0a:63:80:
                    e7:91:8b:f6:66:6c:bb:3a:97:26:5b:30:d7:39:96:
                    2f:c6:97:0b:a5:d6:28:f3:9e:a4:df:35:4a:61:a8:
                    9e:a3:a7:1e:fd:76:02:fa:59:d1:32:b1:99:a4:77:
                    35:90:aa:59:27:47:9c:1f:bb:4c:80:4c:4b:bb:34:
                    22:dc:28:6f:83:93:83:88:b8:5d:76:78:5b:7b:b1:
                    e5:41:12:f6:52:9e:c0:bf:74:e6:c7:b3:03:d8:07:
                    b5:bf:bf:dd:23:73:ac:13:ea:1d:ff:52:7d:d8:b9:
                    2e:b4:59:3c:89:41:82:68:70:47:7e:3a:41:de:37:
                    d9:29:bf:5d:67:09:a9:e2:c8:35:6b:69:15:d7:60:
                    05:90:8e:43:27:4e:53:f6:b3:64:ce:52:97:0c:8d:
                    ae:22:81:02:a8:b6:d1:b5:73:d1:1b:4f:f0:22:fc:
                    5f:14:51:5e:e0:a0:94:ee:09:53:d9:e5:3d:2a:e6:
                    f4:8b:56:b1:62:c0:b1:fe:55:09:89:0b:c1:02:31:
                    f6:08:80:db:a5:98:35:c4:9c:41:03:68:f9:53:f6:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:97:57:4F:3B:0A:18:8A:A2:54:5D:3F:5A:D7:FF:61:4B:77:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4f9af96b-0de4-3b6d-92c3-860874819329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:f3:73:65:3c:6d:5c:a2:0a:fd:5e:a9:1b:b9:75:cc:c9:
         bd:c3:0d:ac:59:1d:7c:2c:c4:f8:98:83:56:f1:da:5d:e8:f7:
         9b:3b:9a:61:f1:ea:db:0c:9d:b1:01:68:f7:40:ab:16:35:1c:
         30:c8:d2:2f:f1:4e:a6:58:22:73:4d:c6:68:d5:a3:db:7c:d4:
         66:7c:03:9f:7b:b4:4b:21:da:c2:a7:f8:b5:f6:3c:a1:a3:cf:
         41:d8:aa:07:53:02:ab:a9:13:7e:a9:ac:ab:df:0c:52:69:c7:
         11:b4:87:e8:e1:23:73:43:10:be:64:b4:45:68:6a:64:9a:eb:
         f1:5b:f7:c4:b8:b8:56:90:88:c0:bc:61:64:02:8b:30:d1:e9:
         73:ce:ec:6f:51:b9:bd:5e:92:c8:13:98:82:7b:d8:33:c9:73:
         a3:2b:36:6b:90:20:e5:2b:45:e2:4e:aa:21:24:4d:14:db:d0:
         52:66:c7:cc:14:57:34:4e:3c:08:92:35:93:60:c0:01:4e:51:
         ad:99:1e:95:67:2a:af:14:a8:80:be:51:ca:ff:41:a7:64:73:
         55:e9:a6:44:03:17:55:ca:47:a7:b4:d1:68:39:ac:f1:48:a5:
         e9:07:ed:7b:7f:ac:e5:bd:d9:71:0c:1c:91:54:0e:16:a9:f8:
         0a:dd:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:59 2025 by rpki-client