Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0867f162-ccea-3032-8046-1d5c1c5babbc.roa
File:                     0867f162-ccea-3032-8046-1d5c1c5babbc.roa (raw, json)
Hash identifier:          4yK73fbRHBGPGke+Dzqq+alObRyG9Z+nWp/GCBWsuAs=
Subject key identifier:   5F:2F:17:7B:5A:81:0B:30:36:04:87:65:CF:B1:30:FD:4F:08:74:E8
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328584A8BF5DB36C9DF220F13515500
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0867f162-ccea-3032-8046-1d5c1c5babbc.roa
Signing time:             Thu 17 Jul 2025 08:53:30 +0000
ROA not before:           Thu 17 Jul 2025 08:53:30 +0000
ROA not after:            Wed 15 Oct 2025 08:53:30 +0000
asID:                     29016
IP address blocks:        168.146.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:f5:db:36:c9:df:22:0f:13:51:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 08:53:30 2025 GMT
            Not After : Oct 15 08:53:30 2025 GMT
        Subject: CN=429070aa-dade-4e18-a339-27d501554a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:e7:54:11:b8:a8:5e:58:25:41:96:15:18:
                    f0:e1:72:fb:b8:eb:b5:30:4e:3d:30:30:9e:00:ff:
                    88:c2:e0:27:c2:4c:48:b7:8f:ce:30:98:25:ed:b2:
                    0f:e9:91:f8:98:1f:6b:9c:0b:b1:aa:8a:bf:00:e8:
                    34:84:8d:32:2c:91:9b:7a:80:e4:43:29:2c:58:b2:
                    cb:7d:fe:19:5d:44:32:01:01:f9:9f:0c:9b:7f:e7:
                    6f:ad:f2:37:73:36:fb:a2:59:fb:3a:6b:b0:06:43:
                    91:72:64:16:59:cd:aa:12:df:53:8c:4a:96:8b:bc:
                    50:b4:bf:ea:94:a3:98:a3:f1:dd:34:30:c1:38:36:
                    67:fe:bd:d6:f5:d2:d5:90:32:fa:e0:98:b8:e1:ea:
                    8e:cd:7f:56:11:8d:d5:6b:1d:5b:d3:44:1e:ef:16:
                    77:74:19:04:60:40:2e:fa:a0:35:e2:1e:c1:b3:9b:
                    64:25:af:e7:c5:cc:2d:57:53:cc:35:43:d9:80:20:
                    7f:6c:88:0a:5e:a3:ee:5f:a2:24:ab:75:c7:46:cf:
                    3d:4d:a8:50:7d:f9:a1:d6:14:d2:15:38:de:bc:2c:
                    cb:94:b7:08:9f:bb:f0:76:90:bc:13:f4:3d:e0:35:
                    09:49:85:a5:26:03:fc:fa:da:cf:7a:bf:5a:5c:4b:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:17:7B:5A:81:0B:30:36:04:87:65:CF:B1:30:FD:4F:08:74:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0867f162-ccea-3032-8046-1d5c1c5babbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.146.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:73:c9:13:bd:c1:e8:b6:8d:11:e1:f6:a6:49:95:58:57:
         1c:46:3b:81:aa:b9:cb:b7:8e:f3:66:0b:bc:17:55:2d:a6:09:
         39:0d:37:7c:df:7b:24:a1:62:cb:d9:94:2d:dd:64:b9:ac:65:
         58:8b:e2:a9:a6:22:2d:06:1d:17:6a:d3:eb:74:c0:94:9d:90:
         87:22:96:54:69:26:f8:90:68:6e:32:93:17:a0:f6:86:02:cc:
         d6:8a:4a:1c:70:33:ce:78:8b:8b:99:42:77:b6:1e:c3:28:f7:
         1f:61:29:28:29:23:2f:b6:1e:25:8e:fc:82:62:34:1c:3f:0f:
         16:aa:67:15:31:e7:a6:eb:7c:29:a3:c1:e1:51:ae:94:b4:9b:
         b3:36:5d:d0:5e:14:c1:4b:38:1b:26:38:2a:6c:ed:a2:e4:b3:
         58:87:ee:da:f0:aa:d3:a8:cb:bf:7f:40:00:48:e3:6a:cd:5f:
         8b:a6:5c:3a:ca:53:fe:ec:7e:44:5c:03:63:32:06:b6:e3:c2:
         93:90:01:16:94:5b:50:79:02:a7:d8:07:42:95:8b:4b:93:7a:
         49:ed:e8:8a:89:66:f2:94:6f:43:f4:f9:1b:40:d5:e0:e5:08:
         95:57:ff:28:9a:57:5c:cb:fd:f1:4e:09:31:4f:ff:d2:fa:72:
         f8:01:4f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:30 2025 by rpki-client