Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa
File:                     0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa (raw, json)
Hash identifier:          nH0UpClFE5bdDTLX1sVTKZUk48wgVMgWKXM4LeAEveY=
Subject key identifier:   03:8C:70:1B:BD:C3:4E:6D:19:DF:3B:5F:E6:D1:44:77:36:55:26:69
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584ABD4B9276CC8BED6BBB366780
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16696
IP address blocks:        147.185.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:92:76:cc:8b:ed:6b:bb:36:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f053d310-c7a8-41b2-accd-961020edcb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:f9:c0:96:a0:d0:60:9c:e6:d8:97:ea:f9:
                    9d:e0:b3:9c:23:8c:0a:0c:ab:83:9c:dc:8a:8b:ae:
                    43:35:d7:53:2a:7f:03:6c:06:a8:44:7e:29:18:d8:
                    1d:d4:7d:78:3b:f7:f7:39:d1:65:e0:0f:b1:f2:d0:
                    e4:50:df:27:a4:20:2f:29:08:44:16:c9:b4:18:cf:
                    9f:85:7d:ea:fe:51:8a:48:db:71:ec:a4:5d:81:d2:
                    63:20:ce:9d:7a:e2:4a:44:2e:42:f5:35:d2:39:bb:
                    52:b6:50:80:96:25:c9:87:eb:15:12:84:fa:54:fa:
                    de:1c:4e:3c:2d:3a:25:e3:89:eb:b5:c8:a3:40:4a:
                    a8:83:9d:d1:bc:a9:49:c5:bb:c2:84:a6:24:32:b2:
                    db:e3:30:4e:40:92:4d:5f:9b:6b:d8:93:3c:17:0f:
                    1a:90:b6:1f:be:67:c3:bb:a1:63:df:6b:2a:09:2b:
                    35:88:00:fc:fb:ba:23:76:08:ad:ab:66:65:42:84:
                    f4:db:e6:e0:6a:e1:9a:87:93:0a:86:68:67:c9:ef:
                    46:1f:4a:79:ae:4f:81:25:0a:0e:f7:c6:aa:a7:06:
                    f7:3c:b7:75:80:4f:40:3d:1a:d8:5e:ad:25:01:4a:
                    fe:4e:b3:ab:d8:5d:76:cf:0f:5f:86:46:e3:97:70:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:70:1B:BD:C3:4E:6D:19:DF:3B:5F:E6:D1:44:77:36:55:26:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0927b7c2-c515-3b0d-bd63-b3e665f2aa71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:69:65:e4:3a:64:f4:eb:c7:75:79:94:d2:ac:38:e5:42:50:
         99:02:ba:67:a1:53:46:83:c6:34:6d:24:b9:e3:97:4c:bd:c5:
         7e:a7:21:4f:29:23:45:fb:a2:ea:d0:d4:df:c6:53:b9:3e:fb:
         3c:1b:20:ef:2a:26:c5:bb:e2:09:d1:fd:d7:ec:67:00:2b:4b:
         4c:83:dd:e2:46:06:3e:1d:11:be:39:e3:b6:fd:3f:72:03:2e:
         64:be:48:fa:51:f3:49:21:cd:85:03:a2:fa:a5:ca:64:7b:13:
         3d:7e:c9:58:f3:dd:7a:36:a0:d5:0f:03:3a:86:16:48:f7:58:
         e5:be:7d:81:b4:87:54:20:0d:86:32:27:74:54:d5:ed:f5:4f:
         d1:46:c5:91:79:32:59:50:bb:7c:c8:04:13:15:e7:c0:36:6c:
         45:1c:dc:ac:4f:a8:40:34:c8:49:50:41:0d:4e:d1:5f:68:9d:
         87:97:d1:70:35:29:9a:69:d9:a6:dc:1f:f8:d9:f8:61:a8:8b:
         bf:20:68:8d:d3:85:83:da:4e:4b:cd:0e:b2:9a:ce:b7:7a:55:
         92:b5:91:35:6d:e3:0e:83:2a:f5:bd:c2:e8:17:8b:6a:1a:cd:
         5b:43:09:bd:f3:b8:99:12:2d:6b:88:55:a2:69:b2:d6:46:39:
         37:3d:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:24 2025 by rpki-client