Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
File:                     a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa (raw, json)
Hash identifier:          gd65ug37N7Oab+Mt7KxsqV6V+J3fOaXL5OJ3OQ8sX2A=
Subject key identifier:   6B:05:BA:65:3A:F5:41:95:21:65:84:21:A2:BC:A9:82:4F:1B:F5:1A
Certificate issuer:       /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial:       010D0C9F4328584AA85BBBBBFF230B8CAC3B4100
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     34
IP address blocks:        128.4.0.0/16 maxlen: 17
                          128.175.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bb:bb:ff:23:0b:8c:ac:3b:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=dba5150f-c3ae-4d62-b8ea-0137996aacdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:57:aa:98:ac:ee:35:4c:48:29:86:8e:ca:
                    69:e9:5b:74:ca:fb:12:5f:07:0e:d0:ea:3f:b4:fe:
                    9f:ce:fe:8d:2a:fd:2a:4f:f6:b9:d8:25:2f:ff:3f:
                    9c:44:06:e2:49:95:59:2b:26:c3:62:95:92:9f:a5:
                    79:92:b8:4f:6c:af:80:9f:14:48:07:ef:84:73:bb:
                    73:a9:c4:4d:47:78:04:04:8c:1e:f6:30:0e:57:63:
                    47:d3:7f:5f:a7:5b:23:5e:5d:45:0e:73:02:f2:d7:
                    7f:26:47:71:2b:f2:c8:97:db:1a:38:af:28:e6:81:
                    8d:8b:83:96:66:34:10:ab:83:08:1f:bd:0d:30:03:
                    e2:72:35:ce:dc:65:ff:77:f5:fb:57:11:4d:95:57:
                    45:6b:8a:dd:3d:ae:2c:48:e3:13:a7:c7:5b:29:d1:
                    29:cc:2f:f9:5b:09:b5:18:90:8f:46:8c:88:ce:b2:
                    90:5a:e0:27:0d:7e:19:f3:d6:2c:1e:dc:b7:0e:a3:
                    1f:b1:95:47:a5:4b:50:d9:05:de:f3:36:23:ea:99:
                    bd:aa:34:49:19:37:2a:6a:cc:ab:82:ea:a8:0a:75:
                    e8:db:d6:33:c3:45:fa:aa:39:92:d2:c5:c7:99:68:
                    3b:ab:ea:b5:08:6a:b7:d3:2c:c7:72:b9:77:05:1c:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:BA:65:3A:F5:41:95:21:65:84:21:A2:BC:A9:82:4F:1B:F5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.4.0.0/16
                  128.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:df:ef:da:43:6a:7e:f2:2d:f4:89:04:3c:80:e2:64:8f:75:
         1f:e5:09:a5:32:09:9a:2d:a5:78:c9:88:b9:cf:e8:d3:2c:aa:
         72:dd:91:64:af:0d:cf:2c:4f:7c:7b:c3:31:68:c5:3b:5c:b9:
         fe:18:b4:7e:f4:d8:71:fa:6a:30:5a:95:9a:b0:9e:4b:d5:c6:
         ba:65:10:66:5e:23:88:33:cc:62:17:c9:68:1d:0c:e5:f9:80:
         36:b6:16:51:03:4c:b1:c3:eb:41:79:b4:93:40:46:23:f1:9f:
         4c:27:6d:15:95:eb:05:69:88:b3:21:1e:98:ff:d8:3b:ab:22:
         ab:91:88:03:c9:e3:52:f0:4c:9f:6d:4b:47:67:71:87:43:e3:
         a7:0e:06:7d:d2:0a:74:ae:a9:c8:66:29:e3:66:c1:4b:08:55:
         0c:5a:e9:47:67:a6:7a:6f:54:88:97:72:21:a9:d1:9d:4e:a3:
         1f:da:29:85:02:60:35:d2:f0:34:38:d2:ab:34:ca:3c:64:b4:
         ad:a1:0b:02:e0:3f:06:a3:95:35:9d:7f:8b:2e:93:48:37:86:
         a1:da:8d:bd:48:09:7d:41:80:db:e9:25:ea:45:6e:3a:c2:58:
         79:17:28:5b:5d:00:cb:24:a4:12:98:13:e2:ea:1b:c6:b5:4a:
         82:d8:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:46 2025 by rpki-client