Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/1e27f37f-2cb5-3619-a226-60049e9652fe.roa
File:                     1e27f37f-2cb5-3619-a226-60049e9652fe.roa (raw, json)
Hash identifier:          Uw54NwbN+93JeyflO+t3drXy2bDZb8MfzQLjV5ZyPfw=
Subject key identifier:   46:BA:81:70:7A:7B:21:42:8D:9F:A7:BA:B7:D1:9D:2D:01:2C:18:B9
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F4328584A96368E6C376E4A59B7B1F080
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/1e27f37f-2cb5-3619-a226-60049e9652fe.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     55247
IP address blocks:        162.211.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8e:6c:37:6e:4a:59:b7:b1:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=d87158c4-bb22-44c5-922a-d7184306049b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:80:cc:9c:2f:54:e2:fe:80:8a:1b:04:d4:a6:
                    ac:42:9a:52:9c:13:62:f6:a6:29:82:92:74:5b:1c:
                    84:66:89:53:fb:37:5e:6a:70:04:8b:06:14:e5:34:
                    c7:68:bf:1f:9b:bc:f5:a1:3f:cb:36:59:d8:4f:e5:
                    51:ea:d4:75:1d:f2:ac:2f:8c:99:9f:f8:1d:77:d0:
                    08:0a:24:e2:9a:66:3a:0b:1d:70:ec:38:8f:13:95:
                    d3:47:b3:af:45:ce:20:56:8e:6f:f6:e1:40:c0:4d:
                    6b:f4:a8:a2:97:ea:c8:d3:7a:2e:5a:be:74:09:8e:
                    ce:34:c7:a0:40:e4:ec:77:67:62:95:14:c1:fd:d8:
                    6b:ee:f9:ef:58:fb:8d:db:77:3e:00:06:32:24:da:
                    d0:cb:42:42:e6:02:f6:65:0b:d6:ff:a0:de:bc:21:
                    b9:4b:b8:01:7d:10:a0:46:65:57:eb:fa:04:7c:23:
                    56:58:53:42:14:6c:26:f0:f7:3c:ac:54:f6:84:28:
                    32:b3:93:6e:7d:f7:bd:4a:ca:83:20:74:43:90:99:
                    fb:0c:80:7f:fd:90:ea:ec:63:4d:32:d3:45:93:bc:
                    95:86:d4:07:e3:84:41:39:07:4e:53:ad:fb:23:6c:
                    05:ec:61:0b:e6:dd:95:d8:42:42:c2:94:52:05:8f:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:81:70:7A:7B:21:42:8D:9F:A7:BA:B7:D1:9D:2D:01:2C:18:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/1e27f37f-2cb5-3619-a226-60049e9652fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:b8:c5:36:e7:d3:0d:f3:ef:e7:b1:85:8b:aa:ac:f9:58:
         74:e7:68:44:3c:73:3e:db:ca:c9:00:6e:7f:3d:e8:8d:57:26:
         3d:2f:a2:b3:38:2e:db:e2:92:a4:91:6b:cc:0d:19:cf:6f:8e:
         e7:bd:17:85:2d:bf:06:3c:63:7b:b4:59:24:d4:64:c0:94:82:
         e0:2c:75:9c:66:66:3a:84:0e:99:20:b7:52:4e:7c:96:f4:c3:
         87:18:f0:fc:56:f5:93:a6:dc:1d:12:2e:2e:90:21:29:40:19:
         f2:c1:3b:82:1f:d5:34:b0:6e:16:5e:b8:2e:c1:5c:41:b1:c1:
         85:80:61:cb:39:09:a4:1b:f4:d9:8f:9e:c4:54:57:ec:be:35:
         d0:e9:48:48:fc:01:15:96:3c:67:65:f9:49:23:b1:4a:f3:eb:
         e6:6f:2a:77:9e:35:da:77:e0:22:6c:c6:25:9e:3b:81:c9:9a:
         d6:25:3d:24:4a:c0:c9:67:71:ef:5f:4b:08:7e:5d:68:ec:c2:
         d0:88:0c:ac:92:e0:71:2f:a1:99:0e:f1:9d:59:7d:af:bf:e3:
         a4:28:45:64:bb:74:62:1c:e6:f0:c8:01:2b:73:2f:cc:b9:1b:
         7e:4b:7b:f0:fa:22:6b:f8:b2:bc:86:9d:0a:cb:9f:3f:1c:d2:
         95:ef:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:47 2025 by rpki-client