Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b186ec80-82fa-3e4f-a91f-240fb3bd1b62.roa
File:                     b186ec80-82fa-3e4f-a91f-240fb3bd1b62.roa (raw, json)
Hash identifier:          7VGWZz+b/IKV3N8EfxiJWBRmNa3VpmAnC9b1yNoFFPw=
Subject key identifier:   43:96:3E:1A:30:67:D4:9C:17:36:A4:C3:3C:F0:5E:BD:7D:6A:AA:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDB3D016C0F1581A684A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b186ec80-82fa-3e4f-a91f-240fb3bd1b62.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        71.234.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:b3:d0:16:c0:f1:58:1a:68:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=59772d15-83dc-441a-aeef-bf2edea7cf24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:76:c7:f0:cc:2a:c0:c8:d6:2d:87:de:f0:
                    e9:92:34:6b:0b:e6:05:1d:c3:d3:5a:89:69:58:aa:
                    bf:12:75:39:d5:bc:81:77:a9:8f:1e:74:9d:bc:4e:
                    04:f5:46:23:82:58:1c:bf:46:7e:88:37:fe:e3:1f:
                    21:53:ca:2b:1a:60:1d:00:c9:cf:8e:2c:f6:6b:0f:
                    fb:17:49:cc:39:8d:27:2a:cb:c3:8f:83:4d:a1:a4:
                    27:45:01:c2:7d:c3:52:b3:f6:f6:30:56:2d:58:07:
                    e1:1f:b6:f0:1c:4f:60:29:e6:1b:33:bc:8c:e7:ed:
                    2f:80:09:ed:ad:9c:ad:b1:47:2b:62:fe:d8:6f:8f:
                    51:19:f6:12:a2:7c:94:d8:75:a7:83:37:36:5f:4b:
                    a4:c1:4c:f6:4a:bf:b7:f9:18:f6:26:30:64:5d:25:
                    36:1b:4c:0a:1d:04:b7:7f:11:c9:cc:99:69:60:13:
                    05:e2:a5:1b:29:fd:72:e7:ab:60:80:fa:cf:34:7f:
                    e6:43:45:57:bc:8d:9a:c4:69:0e:10:81:73:51:e0:
                    14:9e:21:cc:a5:a6:1f:53:43:16:7f:04:ba:73:1e:
                    a5:67:7e:83:7a:f0:f2:99:ae:29:3b:9d:01:40:80:
                    80:e8:d5:36:12:1f:84:cc:4b:a6:cf:43:31:fb:9a:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:96:3E:1A:30:67:D4:9C:17:36:A4:C3:3C:F0:5E:BD:7D:6A:AA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b186ec80-82fa-3e4f-a91f-240fb3bd1b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b1:ce:92:12:66:74:72:fe:39:ae:05:d1:85:20:c8:2f:c1:
         31:85:c9:c8:e8:65:a8:1c:2b:92:8d:03:29:7b:2a:a0:95:71:
         07:aa:31:b1:2b:0d:74:89:29:43:d8:33:4b:55:dc:da:60:f9:
         d1:ef:a7:94:57:06:db:68:1a:4b:ff:bb:06:b1:c6:18:b9:88:
         a9:c2:33:9f:39:00:70:04:2f:10:24:f5:30:6e:55:c0:c9:65:
         fc:4d:f6:03:80:e7:99:58:25:73:6c:26:fb:f0:42:f1:d3:0e:
         6b:97:cb:fa:0c:99:29:8f:89:d1:08:8e:c6:44:49:00:fd:ab:
         d0:c2:58:61:fe:7e:c0:37:a9:75:2a:1f:d5:ad:50:bf:6c:b4:
         a6:c5:16:5d:67:dc:8f:cf:f7:a6:21:19:63:9b:67:18:5d:dc:
         3f:a3:da:3d:dc:ea:2c:58:09:99:00:6e:fa:69:a9:e1:4f:5c:
         a5:5c:f4:9e:c0:9d:90:a8:cf:5b:2d:f1:48:0b:34:a8:cc:a1:
         17:13:90:9e:24:c6:bd:e3:0b:8e:ff:ef:07:52:63:55:aa:b8:
         09:75:d7:c1:30:b8:3c:fb:ea:7a:cd:92:c5:bc:2d:23:16:99:
         04:8b:44:bd:34:4a:d2:f9:56:a7:9c:19:3a:64:86:0f:db:c6:
         38:84:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:02 2025 by rpki-client