Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa
File:                     fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa (raw, json)
Hash identifier:          Q+/c8ySs0z0cbYzmq7PjzLrTfxWof8EGhOTPByRB9D8=
Subject key identifier:   FE:DA:F7:06:55:64:09:97:CC:A3:E5:92:95:A4:93:BC:F9:0D:73:84
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A94D0E7F2D0A019AFC1C14E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        142.111.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e7:f2:d0:a0:19:af:c1:c1:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=06f62a7a-016e-473c-b62e-c4531e153aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:dd:02:7e:dc:b8:56:a2:80:6e:a5:46:b0:
                    62:8f:ec:d3:3a:cf:b3:61:b0:bd:57:17:26:d2:03:
                    8a:4f:cf:7a:f3:37:12:e3:a5:29:3a:84:12:bb:f1:
                    2a:33:85:be:4e:3f:bb:ca:37:82:8b:d4:05:48:44:
                    e1:8d:9b:dd:0b:fe:d9:a2:b9:21:f5:39:72:ba:05:
                    f3:ca:c8:68:af:b2:52:eb:ba:59:0b:ef:15:23:78:
                    84:b9:b3:85:4b:1b:52:81:c8:8c:31:a4:30:43:82:
                    cb:87:48:52:32:49:5c:f0:82:b5:0c:74:38:7d:9a:
                    25:be:17:98:0c:ec:8b:d1:e1:05:ed:c4:60:bb:19:
                    b3:82:70:7d:fb:3d:f8:4d:48:2c:bd:cd:9a:80:88:
                    d2:a6:94:8b:77:96:cb:cb:bf:b2:3d:f4:77:dd:94:
                    7d:a6:b6:63:81:01:7c:91:90:63:07:8a:07:7b:87:
                    b6:f6:d0:08:0a:85:d6:8e:c6:e0:14:e6:8a:e1:fc:
                    b9:5e:12:ab:59:96:2e:84:65:bf:0f:89:dd:44:16:
                    b3:71:ae:0b:4e:12:f3:b0:ab:04:62:59:a5:2b:48:
                    66:89:1a:26:e4:94:54:8a:12:7a:77:62:2b:f9:93:
                    10:3b:45:37:8d:d3:b5:06:3e:e7:47:e3:8d:bc:67:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:F7:06:55:64:09:97:CC:A3:E5:92:95:A4:93:BC:F9:0D:73:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:48:a8:c0:c6:86:36:f6:33:49:38:70:e1:65:9c:4d:b3:
         fb:74:c0:ab:4e:fe:65:da:78:c9:6b:2b:1b:f4:8c:70:88:7a:
         21:35:95:61:cb:b7:0d:5e:49:d3:a3:3c:14:01:85:6a:60:cd:
         19:d1:36:4a:a6:4d:69:4a:1c:ac:b9:5f:1d:c0:0e:76:11:b2:
         f5:95:a6:1a:fc:34:7f:dc:38:82:a2:2a:ce:40:cc:e3:f1:b3:
         f1:d0:60:07:39:c2:44:92:b3:c2:f8:5f:5d:6e:1e:a2:49:68:
         f4:2d:45:28:0e:9a:af:fa:31:e2:73:ac:6f:d7:65:e8:98:5e:
         38:30:69:15:b2:d9:eb:81:19:66:0c:b2:93:89:84:6a:81:4e:
         4d:39:b8:f8:8a:01:26:e2:bc:58:fa:6a:c2:2d:01:fc:fe:cd:
         6d:57:2c:51:bf:23:ab:42:e7:e9:6a:c3:48:20:20:9e:0b:15:
         40:f7:5f:83:10:e1:6a:2d:86:08:55:57:33:2f:f2:07:39:34:
         38:b9:f6:28:34:e4:cb:14:3f:41:84:2e:72:c7:49:64:99:06:
         f3:65:42:b6:67:36:72:03:59:01:3c:af:cb:7e:56:a5:d1:90:
         03:c0:0c:24:6c:c2:5e:11:11:7a:d2:67:87:a8:0a:c6:6b:14:
         29:6a:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:49 2025 by rpki-client