Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/90012e42-9e0c-334a-a554-c479066f86a9.roa
File:                     90012e42-9e0c-334a-a554-c479066f86a9.roa (raw, json)
Hash identifier:          yZGz40pBhNjKsvVzXvO1ByRlHBsu3e6hTLo1IRpuBvY=
Subject key identifier:   99:77:34:39:CB:DE:FC:43:0F:E9:8A:A8:EA:0D:3F:46:F3:25:32:C8
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB26495574FDC5E1BAB1FF80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/90012e42-9e0c-334a-a554-c479066f86a9.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        199.254.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:49:55:74:fd:c5:e1:ba:b1:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=6660aa7a-e5ea-4bc0-b289-73bd408c7c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:86:41:c4:5b:ea:1b:6b:5d:2f:15:c2:ca:
                    a9:a7:ab:b7:2e:7a:c3:df:7c:d0:07:be:94:15:6d:
                    d0:25:49:eb:b8:7d:ab:8b:b5:9d:a0:78:45:15:80:
                    e0:46:d7:4d:6a:a8:01:c5:2c:c2:aa:e0:d5:65:23:
                    80:2b:5d:fe:0f:fd:80:02:05:37:da:8f:cc:d4:d2:
                    9f:f4:01:4b:a5:c1:e1:10:c0:90:af:30:d6:2c:54:
                    f5:62:21:9f:1c:f6:21:c0:64:a9:84:94:91:5b:1f:
                    b4:34:e1:fc:b1:af:da:e7:ae:66:a1:77:d0:6a:49:
                    6a:f4:33:70:29:08:68:7c:2a:c0:1a:63:f8:02:66:
                    6f:82:38:63:cb:90:36:92:2c:1d:cc:3d:86:9d:88:
                    b1:85:88:36:00:41:5a:04:da:5b:c8:aa:d6:dd:e9:
                    f1:4f:be:78:cc:d8:08:98:79:e8:38:b3:fe:25:13:
                    c6:38:c0:79:1b:cd:cc:47:5d:57:bc:fa:ac:4c:3f:
                    07:14:76:1f:18:64:03:05:f4:07:20:b6:95:c9:4c:
                    2f:50:69:9d:9f:bf:76:f3:7b:88:c1:30:c4:3c:59:
                    fb:6c:5d:34:65:83:f2:ff:da:d0:e3:1e:40:2c:54:
                    28:1f:8d:82:c3:1a:6c:f0:85:eb:24:ab:cb:06:52:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:77:34:39:CB:DE:FC:43:0F:E9:8A:A8:EA:0D:3F:46:F3:25:32:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/90012e42-9e0c-334a-a554-c479066f86a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:cc:f3:c1:72:c2:0e:32:6b:e0:a1:1a:57:bd:d0:59:9f:
         70:4b:47:e4:7b:dc:f6:fd:59:81:c7:ed:a6:a6:53:d4:18:6e:
         1c:94:c0:83:7e:09:05:a4:51:4f:4f:86:a8:b5:ca:95:b5:32:
         80:39:b4:e9:05:cb:b0:13:d2:6c:66:01:81:7f:4e:d5:b1:14:
         d4:a8:6c:53:c9:53:1e:f5:0f:12:3a:99:d1:fb:1b:64:d2:b5:
         4c:5c:96:1f:4d:47:41:2b:78:df:d6:14:3d:0d:59:d7:b1:e7:
         07:95:18:71:93:96:0c:f5:ce:54:15:57:99:43:50:62:57:8d:
         b0:8d:8d:65:15:c8:1c:46:fb:74:cd:eb:8d:ca:5d:c7:d3:87:
         33:ed:b9:20:4c:9e:0f:02:d3:4a:04:a3:4d:30:60:ee:df:5d:
         bc:bf:6a:97:68:a1:f0:79:4c:92:e9:59:18:fc:6a:fa:0e:a2:
         e2:36:32:cd:df:cb:eb:ae:55:db:ba:20:a9:b9:86:42:bf:0c:
         32:ff:ff:fa:8c:ba:06:6f:db:b6:4d:69:89:dd:09:3e:04:32:
         18:c0:61:f5:0d:bc:5e:fb:98:d3:04:16:e7:bc:65:c4:5f:ad:
         b6:62:0f:52:7c:11:bd:67:b0:6a:54:9e:a1:b5:7d:03:c2:07:
         12:da:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:39 2025 by rpki-client