Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
File:                     fb067586-180b-31bb-9e56-5603dfecf409.roa (raw, json)
Hash identifier:          suatfIyyqstcnTqdc4xosQyxtVsOwC6T4GOTeN1ZzHc=
Subject key identifier:   E8:D0:13:3F:C1:F4:2C:4E:17:39:07:DC:78:72:29:D5:8D:83:FA:C5
Certificate issuer:       /CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Certificate serial:       010D0C9F4328584A8DD5FE4A82E78CA357578C80
Authority key identifier: 10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     401408
IP address blocks:        216.181.130.0/24 maxlen: 24
                          2602:f7c8::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:fe:4a:82:e7:8c:a3:57:57:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=5100feec-188d-48fb-aaf7-42d168ed57cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:76:89:dd:16:f8:dd:39:81:93:49:95:43:
                    e6:9c:bf:27:c0:57:a4:65:7b:a2:ac:61:8c:3d:e7:
                    c7:f2:b0:e5:28:2b:85:f8:f5:65:a5:d7:1d:c4:50:
                    6e:37:e3:1d:3f:e0:44:9b:2f:29:8c:95:e8:6c:11:
                    fe:e3:31:4b:f1:15:cf:f5:47:0b:29:49:f1:76:88:
                    2d:fb:78:61:45:40:61:4d:c9:d9:36:df:cf:a1:dc:
                    da:1c:6f:f2:68:fe:4b:fc:87:25:4d:2c:86:50:46:
                    63:dc:31:af:7d:e2:44:30:8c:1c:ca:04:4d:6b:a1:
                    90:ab:5a:4f:f1:05:8d:ed:39:a2:f3:56:2b:a8:a8:
                    34:8c:11:45:09:75:31:8e:ca:b8:dc:2c:33:be:ff:
                    d7:af:20:e1:5b:a2:f1:fb:28:39:44:36:ce:cc:a0:
                    74:f0:28:5d:1d:69:8e:a5:b4:f4:5c:9f:32:48:94:
                    89:6c:bc:f1:b9:af:34:84:76:70:6c:39:77:b6:52:
                    25:29:c6:b9:5d:7e:3a:0b:b1:1f:a6:10:a5:fa:9a:
                    ea:49:6a:ea:27:d8:51:a9:61:a2:ed:b3:b7:9d:f0:
                    3c:9e:06:43:42:c2:17:fe:eb:79:55:c5:82:b8:8e:
                    1d:cc:09:5a:dc:cf:95:4e:89:e7:2f:65:e4:42:2f:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:13:3F:C1:F4:2C:4E:17:39:07:DC:78:72:29:D5:8D:83:FA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl

            X509v3 Authority Key Identifier:
                keyid:10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.130.0/24
                IPv6:
                  2602:f7c8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:41:44:ae:c7:2c:cf:51:e2:57:38:5f:27:02:b4:2d:44:
         dc:63:49:90:e8:a8:07:2e:ca:4f:7f:5f:2d:0b:4b:a4:db:e6:
         f6:27:28:2c:2f:50:7c:69:96:06:98:9b:b7:63:bd:45:33:2d:
         af:00:eb:9d:71:e4:98:a7:97:82:1d:e3:4a:4c:ee:01:47:95:
         48:66:f9:69:ea:3a:be:7c:81:8b:36:c4:f4:a9:68:e0:76:64:
         a5:35:bd:25:74:6e:d1:66:29:2c:85:43:70:6e:8a:3b:90:11:
         17:1f:a8:65:7f:69:bd:7b:ba:8a:4c:be:7a:73:71:e5:e5:dd:
         40:cc:3c:21:c8:70:e1:04:9d:ba:df:c9:b3:d6:a5:06:ea:a0:
         08:b3:d2:db:21:9c:35:af:b1:57:32:bc:8d:34:4a:d8:58:52:
         e9:5b:bf:7d:82:2c:8b:e5:06:65:23:39:f4:af:1a:62:a2:e6:
         d5:25:86:b2:1e:3b:62:72:30:62:6c:06:09:11:c6:e3:61:4a:
         57:a6:0a:87:b4:b5:c1:95:e0:ec:96:c5:f9:30:f5:83:1d:e4:
         3f:0d:78:a0:44:fa:05:7b:dc:7b:46:78:0d:f9:ab:cc:70:b5:
         98:6d:a2:66:ed:c2:e7:ab:85:89:d2:28:ad:d7:ad:b5:50:e5:
         13:a8:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:28:24 2025 by rpki-client