Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa
File:                     087ec3e5-7f63-331f-a693-d6a3371d30fb.roa (raw, json)
Hash identifier:          KjUiGag6SrRfJA6Typ86BAr7oIURqXU2AzzWxF/jdTU=
Subject key identifier:   91:B7:55:E4:0B:17:74:36:48:1D:85:F0:04:D8:E2:EE:1A:6C:96:D2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849EEB506D60B6110B87EFAF3B0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     54113
IP address blocks:        131.125.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:06:d6:0b:61:10:b8:7e:fa:f3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=defef672-1b24-484b-9cb3-887a1baf4323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:3b:b2:bc:5b:37:e7:07:e4:9b:05:ae:ea:
                    02:b3:41:57:3e:b2:5a:91:ac:cf:aa:00:f3:58:ef:
                    ba:fd:ef:89:b0:86:03:4f:32:65:28:01:f6:7c:58:
                    78:68:04:7f:4b:37:c4:f9:f4:68:17:97:61:a6:82:
                    a1:de:49:5a:33:28:0e:f6:bd:4f:e9:43:b4:c3:13:
                    9e:2c:95:0d:dd:9f:e4:89:fc:03:4c:08:fa:08:79:
                    f4:27:93:da:29:8e:c1:b0:b6:9d:22:f3:cc:3c:12:
                    26:07:91:77:c2:65:58:22:e5:f5:ed:2b:70:e2:40:
                    5e:f1:1a:10:83:d2:20:01:61:18:5b:96:59:29:a4:
                    4f:74:55:d1:8b:20:49:ff:cf:f8:50:10:b7:62:52:
                    9f:c1:04:bd:53:2b:82:35:55:ed:bb:5f:02:cc:ff:
                    22:5c:ed:eb:f1:da:a6:be:cf:b2:d4:2e:13:a6:4a:
                    fe:40:b0:19:24:31:2a:73:2f:8e:78:89:d4:8e:75:
                    68:a6:d0:47:d3:b5:f6:f5:8f:b1:6b:47:bd:96:c6:
                    5b:d0:0a:bc:a2:2b:d9:65:b0:72:4d:c3:22:05:c4:
                    b4:b7:ec:b2:33:ca:89:39:a0:b9:9c:2c:17:ef:5a:
                    36:1c:7f:ee:b6:20:e9:9d:c1:94:e7:37:76:32:14:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B7:55:E4:0B:17:74:36:48:1D:85:F0:04:D8:E2:EE:1A:6C:96:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:89:69:27:f5:a0:ea:95:6c:3b:3a:be:30:a7:12:57:60:36:
         98:54:9b:c8:65:d2:2d:33:41:da:72:df:1e:09:82:22:01:90:
         5d:73:ac:76:ab:cc:b3:09:b0:f2:7c:44:03:47:e0:0c:45:96:
         98:5c:fd:76:09:c1:f5:6c:31:d6:9f:c2:80:4f:cd:cc:77:50:
         62:60:f3:e5:76:f5:e0:5a:df:f8:7a:11:d9:8a:a2:22:93:f5:
         34:14:67:8d:ec:8a:c0:59:0f:3d:23:c0:21:b4:0b:64:a4:5c:
         9e:f5:cf:20:74:b1:18:7b:0b:66:80:29:37:dd:82:f1:51:f9:
         2f:eb:bb:44:77:53:4c:a0:f0:37:ae:cf:68:78:19:65:4e:53:
         ef:3b:d5:48:64:6e:3e:35:79:d0:08:4d:61:ac:c3:08:f5:dc:
         f9:2d:2b:c1:a8:fe:4b:08:89:24:76:ee:ce:77:77:70:f0:72:
         ae:f7:bf:48:b3:70:91:a1:18:5c:68:ea:b0:2a:b0:e3:92:28:
         68:89:19:37:09:1f:7d:f2:a4:ae:dd:73:c4:52:49:12:2b:db:
         39:cb:55:e6:77:31:f4:0e:92:eb:b6:da:3c:27:e3:99:4c:9c:
         4b:7d:4a:d3:e3:c2:6a:c4:81:89:d0:3c:3e:50:75:d4:97:26:
         55:2f:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:23:04 2025 by rpki-client