Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa
File:                     4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa (raw, json)
Hash identifier:          LW8tQFansbZCHuGd01w4ddrBtHtnt6whgGwHMuVo3aE=
Subject key identifier:   A6:A3:9A:8A:A8:63:81:13:7F:39:CA:03:90:A8:2F:43:2F:5B:57:52
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584A9FFB9D874D2C8963773B8D80
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     55091
IP address blocks:        198.73.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9d:87:4d:2c:89:63:77:3b:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=a49d7f0f-9ff9-4991-a1af-6c523e65dff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:5c:e8:cb:24:5c:76:97:d7:db:3a:52:7d:
                    71:6f:fe:69:fd:73:4d:75:85:62:33:6c:8d:34:1d:
                    72:99:a0:7d:cd:a9:2a:63:d2:cb:4b:7d:ca:0f:70:
                    91:44:04:1c:59:d9:1c:64:f5:b6:e6:79:da:5e:5e:
                    6c:a5:a5:27:fa:a6:93:64:e8:85:27:bb:9f:99:da:
                    58:25:a6:8d:f9:57:62:49:47:b4:89:76:0b:6f:11:
                    d2:17:81:4e:22:52:eb:19:7d:a8:29:56:d1:75:ff:
                    1c:95:57:30:46:70:85:80:91:fa:55:04:7f:15:c5:
                    08:70:d9:ce:5d:c4:29:44:9e:82:4d:8a:1e:d4:19:
                    3e:85:61:11:4c:d7:7d:b3:3c:bc:c8:ad:0d:d7:9c:
                    cb:88:b3:c4:ce:00:dc:b8:25:69:0e:36:31:11:17:
                    c1:61:90:3d:2a:88:2d:b7:16:34:30:bd:fe:a9:90:
                    fc:9f:e0:41:ab:a6:45:2e:e9:6c:81:8f:26:72:8e:
                    ee:93:b1:9e:71:11:b8:36:64:59:02:ce:70:8f:f1:
                    45:44:a7:95:b7:47:94:3d:61:4c:e5:eb:88:5c:ba:
                    fa:eb:fa:e3:36:77:e8:ca:74:10:7c:b1:9c:c6:23:
                    b9:bb:eb:1e:d7:d8:8d:79:ce:67:c0:fc:9c:91:91:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:9A:8A:A8:63:81:13:7F:39:CA:03:90:A8:2F:43:2F:5B:57:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:26:98:7a:cb:79:99:5d:68:bf:d9:82:2b:c0:98:fe:6f:
         fa:c0:95:7a:ac:2b:69:a1:80:a5:10:c5:90:4e:3b:43:f9:e6:
         9f:13:94:29:3c:8d:e5:de:f0:ba:76:8f:47:fc:56:16:44:49:
         14:80:8d:aa:e2:61:a7:46:e1:70:0f:2c:cf:7a:fa:54:ab:37:
         6a:4f:e6:71:47:f4:26:d8:fb:06:7f:d7:c3:ee:82:e7:de:0a:
         17:12:e6:6a:fc:7f:3e:95:81:9a:82:3e:68:ad:47:3d:24:bc:
         47:ec:59:92:b7:c4:d3:21:54:e1:27:73:30:8f:81:78:e1:47:
         dc:f1:af:6c:bb:2f:bc:5a:a3:d4:b4:50:13:cb:09:25:1f:26:
         2b:df:39:dc:48:e6:d5:0c:b2:35:31:0d:12:6d:31:03:67:bd:
         c2:ba:df:24:f2:10:05:8c:5a:d7:48:68:0c:65:5e:df:b3:41:
         ec:f8:f6:71:ec:cb:7e:d7:42:df:0e:9d:a4:30:ae:a2:0c:b9:
         c0:f7:c6:a4:03:71:e2:b5:4e:e9:4f:f3:18:38:db:32:b3:6f:
         0d:74:87:07:d4:89:e5:9b:c5:56:55:fd:b9:a0:a9:aa:6e:0a:
         dc:b0:0b:f3:e9:3e:61:00:ff:b0:54:46:17:52:83:4c:e5:d9:
         f6:1b:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:15 2025 by rpki-client