Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7f265b69-a4dd-32ce-b11e-b1d8c507268d.roa
File:                     7f265b69-a4dd-32ce-b11e-b1d8c507268d.roa (raw, json)
Hash identifier:          wHm7dyc1CnB40kD16HtdLXjpOz1PAqrx61t74lO4NOI=
Subject key identifier:   63:A3:DF:93:B1:5C:FB:14:07:B7:79:90:3D:02:C1:13:CC:17:52:40
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584AB220CEACCDECFAEEA707FD00
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7f265b69-a4dd-32ce-b11e-b1d8c507268d.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     14499
IP address blocks:        142.192.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ce:ac:cd:ec:fa:ee:a7:07:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=f769e610-a7c9-4ff3-82cf-7247a83dc13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:a2:4d:3b:1c:39:2b:89:1f:64:65:e0:10:
                    b7:bf:58:ae:88:99:97:e1:29:6c:f4:d5:a4:b0:32:
                    42:ec:eb:ad:a0:bb:b2:32:e5:a4:bb:78:4a:b6:49:
                    00:a9:71:82:93:6a:9e:4b:13:24:1f:5c:4c:6c:dc:
                    8e:29:69:c9:6e:64:0b:59:95:f5:09:4e:dc:5a:a3:
                    3e:7f:78:99:33:8e:73:e4:83:be:aa:f6:bc:d7:c8:
                    a5:ea:3c:65:b6:75:11:5f:54:4f:dc:9e:79:74:33:
                    8c:3e:c1:57:d4:ff:c4:e5:f6:83:ef:c5:ac:67:0b:
                    46:a3:a7:83:63:7e:91:56:ab:d3:41:ba:92:d9:bd:
                    d3:4f:36:91:ac:41:5c:92:61:67:8f:61:ec:bc:47:
                    1d:6d:62:9c:a1:d4:df:d2:b6:bd:0c:bd:7a:fc:ee:
                    32:9f:10:c4:fc:8f:47:9c:95:94:37:de:ad:4f:89:
                    b0:fb:f3:d7:88:51:06:48:a4:15:15:30:5a:7d:30:
                    21:cf:75:3c:42:e5:7b:30:dc:b9:38:4c:1c:ee:46:
                    30:cc:80:a6:3e:dc:1e:14:d0:bd:18:9f:fd:5a:31:
                    50:f9:ac:52:4c:e5:e5:8f:52:1d:31:22:72:58:81:
                    91:1d:06:4c:ea:0c:00:3e:34:f0:fa:63:6b:f9:8c:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:DF:93:B1:5C:FB:14:07:B7:79:90:3D:02:C1:13:CC:17:52:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7f265b69-a4dd-32ce-b11e-b1d8c507268d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:43:6c:6e:4a:61:b1:60:9d:c5:d0:ad:1e:a4:f9:6e:89:62:
         ee:07:7a:05:b8:b3:ed:8a:9e:a5:f5:36:f0:ed:1b:5c:c4:3e:
         f3:a0:2d:25:7c:d7:bf:3e:78:fb:b1:7c:94:aa:f0:c0:78:8d:
         bf:e0:9b:d4:8e:df:4a:45:e2:d1:a1:5e:2c:93:51:34:88:51:
         b5:8f:80:67:a1:d0:84:54:22:ab:25:5e:4f:4d:13:a8:e7:c6:
         77:6d:04:29:dd:26:86:54:e7:d4:ae:d1:f8:aa:c8:b5:d6:49:
         d1:d3:09:34:6f:f1:43:57:90:ba:2a:bb:f9:59:df:a0:31:af:
         df:de:88:d5:fc:ee:7d:87:49:e9:8d:85:d4:ed:42:73:61:47:
         55:b7:92:81:92:6e:c7:5d:80:b3:5c:98:5e:ca:e5:04:45:42:
         3d:c4:7d:20:b7:8b:2a:bf:a5:c6:0a:9d:66:99:3d:5e:e3:e8:
         9c:f5:2d:94:17:54:88:fd:b0:ab:86:ac:e1:e9:2e:7c:46:1f:
         45:e7:ff:92:1a:5a:51:cb:d0:24:ad:b3:a5:b8:d8:c6:f5:96:
         09:72:8f:ae:31:d6:d2:b3:bc:4c:1e:42:15:bf:2b:7e:25:77:
         55:48:9a:01:8b:0b:ce:b7:a5:cb:b4:70:cf:90:8c:9c:3f:ca:
         35:44:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:43:35 2025 by rpki-client