Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/027ff7d8-5393-33f7-87c0-e699d5e172b7.roa
File:                     027ff7d8-5393-33f7-87c0-e699d5e172b7.roa (raw, json)
Hash identifier:          m/WPTu0T2trCqhIn0R2LU3eOqzKv+L/HNU0J1iYUkF8=
Subject key identifier:   FE:FE:8F:C0:7C:82:43:03:1B:10:5F:7F:14:A3:55:F2:C9:A5:69:43
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF83D9476F9E1B78E4080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/027ff7d8-5393-33f7-87c0-e699d5e172b7.roa
Signing time:             Mon 16 Jun 2025 16:03:18 +0000
ROA not before:           Mon 16 Jun 2025 16:03:18 +0000
ROA not after:            Sun 14 Sep 2025 16:03:18 +0000
asID:                     81
IP address blocks:        128.109.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f8:3d:94:76:f9:e1:b7:8e:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:18 2025 GMT
            Not After : Sep 14 16:03:18 2025 GMT
        Subject: CN=aecd5207-75dd-4c1d-afeb-58e2c4731792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:7d:b5:90:0b:c2:79:47:bf:19:97:2b:75:
                    b4:08:3d:5d:85:4f:9a:e0:59:6f:3a:2d:1e:85:21:
                    93:8b:e4:19:3b:75:34:e4:46:a3:69:bd:ec:ee:58:
                    aa:7e:8a:22:90:92:23:c9:8e:5a:d5:a5:49:e0:fa:
                    5f:dc:8c:de:9f:b7:a8:10:50:cb:a8:81:dd:72:ca:
                    38:dc:c7:1c:8d:41:89:be:82:15:36:e4:81:73:5c:
                    79:26:32:9d:9e:24:45:b9:ae:08:71:e3:5a:4a:85:
                    ea:75:c2:f7:5c:f4:f8:da:18:fe:ce:d2:c9:15:59:
                    f7:7d:02:09:c4:46:0e:8c:f6:12:c0:3c:c4:81:b0:
                    13:8d:91:50:97:e5:8e:5b:15:8c:d7:ef:69:8a:a7:
                    33:3c:18:4b:e9:78:37:bd:c4:6d:5c:29:a4:79:eb:
                    43:25:55:77:a7:85:50:44:bc:cb:bd:9a:57:c0:ec:
                    b9:10:07:58:0a:5e:87:f5:ad:21:aa:f5:07:54:ec:
                    d1:f5:64:c8:34:7a:e3:e2:58:5b:5c:7a:b9:16:4c:
                    da:ef:a3:21:dc:b4:fe:18:2e:1c:8f:7f:31:e5:f2:
                    9c:1c:ff:4d:ca:e9:fc:4b:0d:aa:db:76:31:e2:53:
                    94:95:b4:07:a6:6f:4b:0d:0a:14:a4:67:7b:50:e6:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:8F:C0:7C:82:43:03:1B:10:5F:7F:14:A3:55:F2:C9:A5:69:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/027ff7d8-5393-33f7-87c0-e699d5e172b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:71:13:81:b6:00:f0:bb:d1:c8:e5:83:d8:21:91:9e:34:2d:
         9b:92:c4:a4:c6:3b:1a:12:ae:85:39:7d:0a:bb:11:a3:3b:c8:
         07:30:b3:bb:3a:b4:af:89:ca:a4:fc:a9:a2:b5:9d:30:06:5e:
         37:d0:03:7b:39:e5:ae:c4:88:95:4b:d0:76:51:26:13:b7:ba:
         7e:48:42:01:f7:5a:4b:0c:b1:ea:7c:f4:45:69:b5:f8:8b:ee:
         4e:60:18:2e:f0:22:32:fc:f6:e6:10:5c:5b:4e:f4:b0:7c:df:
         14:04:74:74:10:b3:b5:3b:b2:a4:8d:e0:e4:bc:65:d5:ca:2f:
         dd:11:0a:de:85:2c:62:0e:6b:23:2b:db:e5:7d:15:43:88:23:
         c5:44:d1:b9:bc:5a:1c:99:0a:95:61:dc:8f:f3:ab:af:13:87:
         71:ca:00:e9:10:d1:d2:d2:7c:4c:1b:ac:62:46:2d:ed:d5:d0:
         ac:55:07:e9:8c:9c:bc:42:58:ff:f5:93:b4:4b:fb:08:70:60:
         38:e7:4b:fe:9c:0f:c3:fe:bb:44:08:4d:a6:6f:50:29:e7:8b:
         8e:44:ae:de:37:2b:62:7d:82:d9:58:e5:2f:63:b2:57:88:49:
         9a:64:6d:b1:58:07:b4:14:e9:5e:17:fd:fa:5f:aa:01:dc:9c:
         b3:96:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:47:38 2025 by rpki-client