Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
File:                     e0124a56-00b3-397d-94b4-a8fccac56c0c.roa (raw, json)
Hash identifier:          CG2yL8JhigFjnBxdcoSJ33w3ivif2x9byGbPrPrf/7I=
Subject key identifier:   D3:46:2B:B3:78:8D:C7:F4:5A:F9:22:5E:99:AC:CB:12:A6:D1:8B:D4
Certificate issuer:       /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial:       010D0C9F4328584AA85BBBCCC17885D46E703410
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     2
IP address blocks:        128.4.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bb:cc:c1:78:85:d4:6e:70:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=a65c28ed-2fa7-453d-aecf-ad799409b8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:1b:d0:f0:e6:32:f3:e4:c4:e5:2a:f1:2b:
                    f8:97:c4:9f:c3:74:fe:34:90:82:93:66:1c:68:81:
                    37:8c:79:0f:9c:b1:0a:77:58:63:1d:4a:db:df:28:
                    2a:83:4f:cc:b2:a6:52:9b:b6:eb:82:18:97:81:34:
                    de:dc:8c:01:e8:24:d8:0f:95:ed:5c:89:0f:f1:5d:
                    24:78:1d:30:ee:d9:49:0c:f7:74:ae:69:1a:44:18:
                    c9:9a:6d:ef:46:bf:e5:cc:7a:6a:37:d6:29:6e:2d:
                    91:c3:2b:9b:d9:f4:a6:fd:e6:d0:10:47:f2:d8:68:
                    be:0b:df:58:30:62:9b:36:08:0b:c4:32:ac:49:1a:
                    85:17:3b:25:26:36:b8:de:d1:f2:5f:c3:55:c3:28:
                    28:14:c3:9c:d3:71:00:51:88:9c:02:47:2a:b8:21:
                    66:35:59:b8:f8:a8:f7:7a:26:d4:c5:9c:a5:81:bd:
                    56:5c:73:5c:22:5a:ea:be:10:c6:2d:ca:47:1e:95:
                    cc:ca:a3:a1:5a:24:63:47:e5:14:9e:4f:a9:d4:e5:
                    af:36:1a:15:58:32:fd:64:ad:9b:9a:76:7b:0b:71:
                    8b:10:6e:53:e6:e8:f6:04:d8:4f:3d:31:4b:ba:ce:
                    46:ae:7d:63:be:ab:4a:ba:be:59:7a:26:65:5d:2a:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:46:2B:B3:78:8D:C7:F4:5A:F9:22:5E:99:AC:CB:12:A6:D1:8B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fe:b8:90:5b:52:18:c1:f7:b5:01:5e:3d:66:01:03:89:a1:
         40:9d:75:f7:0d:86:d2:65:ba:ba:7d:0d:41:c1:50:9e:e7:8f:
         cb:6e:60:4f:56:c5:3f:9a:3f:0c:0b:59:39:a0:b8:57:fd:a2:
         d7:89:ac:14:02:46:d2:3a:bd:5a:83:40:57:44:5c:5d:92:f4:
         70:23:0a:f7:84:2f:45:ae:2b:14:6d:cf:9c:d4:5a:33:d0:98:
         51:16:4d:47:0f:bc:b8:1a:f3:29:cf:4b:b2:dc:7a:e8:3b:cf:
         bf:5e:4e:6f:f9:5c:0b:d5:13:9b:7c:0a:03:bd:70:e3:39:15:
         43:62:22:24:79:17:e5:d8:ee:51:02:9e:d0:8a:fc:92:8f:23:
         63:7e:56:b4:7d:34:d6:11:07:d8:16:46:f7:f2:ae:71:2d:f0:
         99:a6:77:be:bf:12:95:ff:b2:0b:0d:dc:b7:03:14:79:7e:f4:
         0f:55:3b:26:e0:ed:1a:83:9c:1e:09:3e:05:71:85:80:11:1c:
         5d:89:b3:6e:35:f0:15:ce:ae:91:e6:0f:74:dd:ca:2d:4f:3b:
         65:1b:12:15:10:8e:66:ad:b7:f1:ec:5c:d0:cb:92:f3:37:5c:
         b7:89:81:45:f0:8b:98:7d:a3:51:71:41:e1:ef:f2:06:8a:9a:
         ed:cc:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:32:11 2025 by rpki-client