Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa
File:                     5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa (raw, json)
Hash identifier:          3zxq3RKH3TtAbeBmARprnpnYyP83n+YMe4yCn2sNdQ0=
Subject key identifier:   41:5B:2C:44:83:7B:F6:1E:B1:0B:51:FB:6A:64:BB:EC:F2:F5:01:0F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB55BCA14BB329FEAE2600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     206728
IP address blocks:        108.171.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:55:bc:a1:4b:b3:29:fe:ae:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=76141da9-8b48-4e80-bad4-d87def01b529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:b6:ce:73:32:35:33:77:e7:91:eb:a6:5c:
                    3a:b8:30:e6:b4:39:89:11:3d:43:d6:1b:bb:27:0f:
                    80:28:13:03:c1:e9:30:37:aa:41:08:71:fd:11:fc:
                    8d:b7:58:5b:ba:f7:8b:57:b0:a2:03:e3:2e:4d:a1:
                    00:94:47:94:37:34:62:f8:a1:5b:d2:1b:b9:b3:f1:
                    59:8f:02:40:be:2b:ed:03:7e:0c:f5:e1:c3:99:50:
                    2c:50:ef:db:c8:28:de:3f:c4:a9:c1:10:5f:91:4e:
                    80:75:52:68:da:63:e9:e9:cd:d1:eb:45:8f:82:37:
                    f2:33:62:33:95:31:7c:3c:cb:bd:53:82:fd:79:17:
                    9f:99:62:3a:9c:ca:8b:36:42:e5:de:fe:86:c5:4f:
                    78:21:c6:6e:a5:78:62:71:c0:b5:e1:83:e7:0a:a5:
                    9f:cc:b6:78:ca:e2:1c:63:7d:60:4f:3d:83:60:bc:
                    55:ff:32:28:b6:aa:c2:f2:73:22:d3:c3:79:bf:a7:
                    f2:37:65:50:e6:c4:ab:c8:a0:29:93:82:ad:e7:9f:
                    7d:cc:20:0d:6b:1c:d1:d3:0d:8d:f7:18:a8:e0:48:
                    18:15:19:3e:82:48:80:28:f4:c4:4f:c2:46:1a:62:
                    5d:35:c5:e1:7b:35:ed:7c:69:45:85:ed:db:7f:a8:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:2C:44:83:7B:F6:1E:B1:0B:51:FB:6A:64:BB:EC:F2:F5:01:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5398fed9-f8e8-360b-93b6-176a2eaef9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:33:be:3c:f0:d9:83:8a:00:78:7e:25:81:5a:f1:9b:51:0b:
         0b:82:40:b0:ea:36:77:3f:ab:0d:4b:82:74:39:e7:ba:46:20:
         06:4a:8a:2c:39:12:3b:4b:76:71:71:19:65:ad:16:57:8c:e1:
         43:28:ae:47:d4:4c:8d:20:be:be:a8:62:e3:60:3d:51:13:24:
         45:62:45:00:16:62:b2:3d:9e:e2:32:65:0b:0f:0d:af:db:24:
         9f:5c:43:6b:eb:77:ff:ea:71:e0:98:57:dd:dd:47:c6:4b:48:
         1c:c2:37:84:65:39:70:06:52:40:a1:47:53:4d:d7:c6:93:38:
         fc:76:03:d0:3f:93:2c:88:64:c1:57:58:2f:bd:d4:b2:2e:a7:
         c0:00:78:82:c4:69:45:c2:c1:d7:57:d6:ff:13:34:61:5b:af:
         d9:50:6b:73:21:42:95:36:4c:26:20:50:df:7a:56:74:a7:b1:
         4b:b4:32:c2:40:63:79:3e:80:0b:3f:98:51:36:6c:35:df:23:
         de:3d:5e:0c:73:9e:21:77:a6:ed:89:a8:7a:39:d0:46:f9:fe:
         62:e4:c6:c1:52:ba:a2:08:68:e5:ce:01:f1:87:55:f2:1a:76:
         38:6e:18:54:90:67:15:d0:1d:86:ea:c4:94:57:88:b7:bd:29:
         98:78:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:59 2025 by rpki-client