Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
File:                     abc03ea6-f529-3aa9-8649-ff39d4312020.roa (raw, json)
Hash identifier:          khY9eT5CJjd0Dv0U+4OBz/sYjgw2RiQ6DHeJeBELpFs=
Subject key identifier:   CD:CE:AC:09:BC:AA:78:22:AF:20:46:64:11:2D:81:74:87:19:D8:5E
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584AA42B779B68EA31FBEB5D89C0
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     395287
IP address blocks:        192.104.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:77:9b:68:ea:31:fb:eb:5d:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=ef78da4e-2aaf-4d14-a813-3f128fb5be28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:92:d0:36:2d:14:03:f3:de:4b:76:f5:b5:
                    63:6a:d6:2a:58:3d:d1:92:4b:28:bf:7b:79:6d:1d:
                    6e:65:fb:f1:39:51:91:ac:0f:bf:fe:4e:44:c5:15:
                    da:d3:3e:b1:c4:a8:9d:58:23:cd:66:21:17:97:f5:
                    f9:1d:fa:cb:41:e3:93:b3:56:01:6f:bf:2a:bc:00:
                    0b:81:63:fd:65:d1:38:80:a6:a7:e3:2d:85:c4:82:
                    59:3c:16:75:4f:b3:b1:fa:16:94:75:a6:51:46:49:
                    87:c4:3b:78:79:0b:59:0b:5f:06:4d:bd:2f:6a:ff:
                    89:8c:63:bc:45:aa:b6:6e:61:d7:6f:3a:8f:30:63:
                    84:3c:df:22:92:bd:68:3f:09:f1:34:09:11:53:78:
                    1c:f9:33:c7:1c:a5:30:60:87:46:8e:84:56:e4:24:
                    9a:1a:03:02:7d:a8:e7:4d:27:3d:e8:1d:8a:0e:7a:
                    f9:c7:83:db:bd:86:25:63:d4:59:25:0e:6d:ac:22:
                    b5:6b:85:0a:84:03:b3:b7:9b:c5:75:e3:aa:c8:c9:
                    14:77:22:10:41:e6:a2:89:fd:25:ab:0b:4c:42:20:
                    c8:c2:7b:c4:90:2a:b2:e2:a0:4d:50:94:fb:d5:9c:
                    9b:0a:b9:db:75:86:37:ee:df:6d:df:d0:e7:a1:20:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:AC:09:BC:AA:78:22:AF:20:46:64:11:2D:81:74:87:19:D8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:df:78:6b:e0:49:ba:51:19:6c:c6:ef:19:fd:a2:e0:f8:61:
         c5:20:4a:cf:6d:ab:c9:69:1f:2e:31:ad:87:21:a2:12:cc:64:
         99:b8:e0:63:bc:a0:67:4a:33:56:eb:02:58:26:d2:76:2c:80:
         0d:42:a2:c4:2a:29:2e:9c:06:9f:03:43:a2:0f:b8:67:fc:34:
         79:70:db:17:d5:8a:11:20:00:ce:8f:58:d6:e4:c8:6e:b7:62:
         f1:17:9c:42:e9:41:7c:cc:cd:7c:d2:90:1a:07:eb:d9:49:39:
         73:fc:b3:4c:86:62:cd:a4:d1:dd:79:62:f0:74:49:b0:03:86:
         e0:81:b3:d1:0f:08:7d:e8:e7:61:ad:d2:62:ef:91:62:45:9b:
         4f:2a:cc:4a:44:50:d8:e0:0c:21:79:c3:6f:5c:e7:51:c3:6e:
         69:00:a7:f9:b2:c6:63:e1:ce:ea:29:60:9d:8a:d0:1b:b2:dd:
         cf:99:64:b4:74:83:f0:e3:7c:33:2a:ca:6e:4c:a5:87:9e:8f:
         f6:b0:53:35:bc:54:ff:3c:10:20:d3:98:b8:cb:bd:26:e7:6e:
         1c:b7:2b:39:c8:82:2e:43:8a:29:f1:d3:73:f4:85:d3:76:f1:
         3b:0e:82:c5:98:86:04:f1:e9:15:a1:47:c1:a1:71:55:23:3e:
         34:59:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:47 2025 by rpki-client