Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c40b481-4938-3172-96e5-91b63423511c.roa
File:                     0c40b481-4938-3172-96e5-91b63423511c.roa (raw, json)
Hash identifier:          M03HIpxnnLAPfUlbSfwIvuO84+eGB2SBL0Pe6/HRglM=
Subject key identifier:   CE:D0:0E:89:30:0E:BC:18:8C:57:18:3B:16:DB:DD:27:07:AA:AE:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECC24BD6C67C940B89C5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c40b481-4938-3172-96e5-91b63423511c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        71.227.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:c2:4b:d6:c6:7c:94:0b:89:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2c7ee489-6e5b-4fef-bdd4-44569ccb7acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:74:f0:f9:f2:8a:8c:e0:43:b9:a9:7e:f5:
                    b4:c1:96:19:47:fd:97:8b:7b:ff:88:e3:f0:34:2c:
                    2d:b1:83:12:ab:0b:b0:87:d7:53:96:ce:2b:61:4c:
                    c0:8a:e2:22:fc:bb:bb:73:45:3c:4b:69:f0:f4:cc:
                    e1:ba:22:d3:34:60:1a:7f:5d:e3:35:4e:b6:5b:a8:
                    a7:fd:49:ca:98:31:da:f6:bb:10:a5:9e:d1:83:6c:
                    07:99:2c:21:7c:24:e3:0a:1c:dc:97:a2:25:63:86:
                    80:9e:c2:d6:48:76:c5:98:f5:bd:50:36:75:57:82:
                    10:a4:9f:5b:d0:fa:be:8a:e2:43:e9:f6:ce:49:6d:
                    26:4e:4c:3f:3c:cf:06:fb:95:02:d4:da:2e:3a:f8:
                    37:8a:8c:78:33:00:8d:4e:91:89:2b:87:17:c8:f2:
                    3d:4f:e0:84:2d:89:72:2b:99:b4:56:c6:1a:3b:43:
                    34:6e:1e:a4:ac:be:fb:d1:f6:a9:58:cd:dc:4b:58:
                    be:ee:9b:84:d4:5d:17:68:a7:ad:a7:cd:49:9d:b9:
                    eb:11:7b:ae:20:6c:3b:36:05:15:c0:93:71:a2:1c:
                    ba:30:4c:8a:61:2c:6d:87:12:39:3c:db:58:98:71:
                    26:b8:6b:a0:2e:49:90:49:c0:ae:29:53:39:92:ea:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:0E:89:30:0E:BC:18:8C:57:18:3B:16:DB:DD:27:07:AA:AE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c40b481-4938-3172-96e5-91b63423511c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.227.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1b:3a:c3:6b:ca:98:7f:be:1d:c9:28:5e:3b:4a:23:a1:da:
         3f:09:d7:eb:90:cc:a0:c9:95:95:30:6b:eb:27:13:3f:a7:7c:
         8d:61:fa:7f:b7:7c:73:67:00:01:a6:f1:35:91:9e:46:ea:85:
         83:aa:44:09:ef:5c:5b:df:3c:3c:a4:28:8b:c0:f4:17:dd:3e:
         a5:be:77:1a:da:9e:4d:8c:d8:a5:63:16:83:dc:ca:c7:67:1c:
         d2:e4:e6:c1:d9:2c:15:b0:87:1b:db:f5:ed:ef:b9:48:ce:8c:
         b2:f2:9b:89:95:67:a7:b2:a1:85:39:b1:1d:8c:89:9f:bd:6a:
         a1:53:21:f4:08:b4:02:cc:43:fd:8c:64:99:86:e0:47:94:bd:
         6a:c7:38:13:03:27:7a:7f:b6:34:ae:6f:e6:fe:ef:c8:77:8b:
         8b:cc:c0:0c:2f:fa:1f:c6:5e:1a:3a:9d:90:78:08:5e:98:c0:
         a4:ed:64:9b:e9:2f:05:e7:86:1b:4c:6e:c3:82:ee:bf:41:a5:
         24:23:d1:48:54:35:61:22:64:e6:4b:f7:a5:41:06:4c:f2:ad:
         33:68:4d:a0:18:c6:be:eb:9d:b0:61:1f:3e:47:22:ce:75:21:
         a5:aa:af:79:38:c8:16:3d:23:3e:0d:81:e6:6d:05:d2:59:85:
         69:d7:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:30 2025 by rpki-client