Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa
File:                     9c084484-15a4-3b83-8c82-29fbcb22e69c.roa (raw, json)
Hash identifier:          ZtutmUV6Hi2yIQ6lJDN8N8T1tHAQex0c9EMquUW4sn0=
Subject key identifier:   8F:26:DB:5D:A4:F7:14:49:75:C9:EA:5E:A8:AC:BE:70:90:C7:7B:4C
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A90A0B37DCF5C8EFCB2390D00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     1239
IP address blocks:        63.161.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b3:7d:cf:5c:8e:fc:b2:39:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=4fe383e7-c87a-474f-8a91-5627a7a4c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:d5:68:42:86:d4:0f:b4:31:23:d3:76:59:
                    14:05:06:ec:68:51:de:7b:a1:5a:4e:d8:cf:53:4f:
                    3a:cf:17:8c:b7:ca:00:6a:91:c3:8f:67:fc:c5:71:
                    84:6e:7e:bb:bb:2d:b8:e9:19:72:75:b4:b2:70:18:
                    58:05:c1:98:3c:6f:55:d0:28:27:21:bd:bc:b9:27:
                    76:13:48:be:40:70:0a:0a:f2:b5:8c:1b:3b:c4:f2:
                    bf:ad:e1:79:f4:d6:66:9a:0f:8d:02:f1:56:13:d6:
                    d5:fa:20:7d:28:ab:4a:3c:f7:9b:b2:eb:8e:9c:6e:
                    8b:13:15:7b:44:c6:a1:db:87:1d:34:bf:e7:98:3a:
                    a4:e0:7d:f5:8f:73:fe:7f:85:26:41:f2:92:a1:f6:
                    f4:2e:95:8c:89:67:09:cb:49:ce:82:fa:3c:29:c0:
                    28:b9:2e:18:e2:24:d2:0b:ec:f2:a1:7e:fc:09:aa:
                    62:59:60:44:8d:31:4f:d0:2a:5f:58:b2:d7:9c:b2:
                    3f:35:77:39:36:f6:f5:a1:51:fa:11:3b:de:2c:0a:
                    65:bf:ac:a7:37:4e:cd:ee:94:31:75:a5:94:ea:db:
                    18:cb:49:f7:fb:8e:c6:07:0b:fc:8e:c4:c8:a1:77:
                    7c:a4:0c:a4:e9:f0:88:72:94:0e:25:df:70:12:8c:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:26:DB:5D:A4:F7:14:49:75:C9:EA:5E:A8:AC:BE:70:90:C7:7B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e5:e6:16:a0:fe:29:94:24:82:6a:54:4f:5d:6f:7f:ca:c5:
         2d:fd:34:94:93:cf:75:95:c7:a4:39:e9:f0:5e:68:29:e1:72:
         1b:65:a5:12:0c:33:e0:8b:c3:66:6f:e6:cb:58:39:c4:e4:c1:
         fd:1f:b6:e3:e1:6d:44:c4:5b:8b:ee:ef:82:d7:45:fc:1c:7e:
         d3:fd:ee:62:71:74:28:68:d2:7a:2d:c6:e2:42:c5:8b:b5:ad:
         2c:48:b0:7a:89:ca:1e:66:4c:37:ba:5f:d9:6b:e5:12:c5:dc:
         e0:15:39:6e:c6:b0:5f:d7:d0:7d:d9:c8:70:fc:f6:44:b3:de:
         3b:b2:c4:d8:94:94:db:92:42:75:df:c1:a7:f4:fe:4d:f9:ad:
         b1:88:b0:04:38:9b:05:ce:77:7f:62:67:79:5b:5c:eb:f9:54:
         a4:b4:af:76:be:12:cd:e0:dd:f6:4d:24:99:6c:4a:de:38:bb:
         ff:47:d2:9d:4d:b2:87:65:9a:09:b6:ff:01:fd:4e:b4:4b:a2:
         44:3a:84:7b:2e:aa:5b:bc:3c:83:df:bc:79:c1:75:e0:ac:9b:
         b8:04:1f:8e:c1:df:44:84:08:15:70:cc:38:a1:21:f2:d5:48:
         63:76:5b:f0:53:6c:5b:2b:93:99:e7:b3:f8:78:85:0a:4d:2e:
         48:63:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:23 2025 by rpki-client