Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/1ad21c0b-e01c-3049-a221-0f6391386cb6.roa
File:                     1ad21c0b-e01c-3049-a221-0f6391386cb6.roa (raw, json)
Hash identifier:          OIA0yLV4YP7sgbyHKvwJqmR3ukp+EP8yychN6RgiebI=
Subject key identifier:   A9:0D:95:FD:D7:5E:F7:AB:49:6B:B3:2C:6E:2D:60:93:5F:B5:F1:8C
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584A9BCB6E11A99EAFC049619A80
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/1ad21c0b-e01c-3049-a221-0f6391386cb6.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     19901
IP address blocks:        143.103.128.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6e:11:a9:9e:af:c0:49:61:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=534db45f-4eeb-4abf-b0e4-94fea17844c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:1a:dc:7b:f5:34:cc:3b:23:9d:e0:d9:3c:
                    f3:f5:e2:44:89:92:da:84:7f:79:e6:27:b8:64:96:
                    11:11:1f:98:9c:e4:5b:35:0f:d1:2b:82:f5:d3:7a:
                    55:91:8b:df:08:1a:48:1a:14:df:6d:75:9e:75:9d:
                    77:cd:8e:eb:3c:a6:ed:2e:fb:3b:50:d1:13:59:10:
                    a2:8a:65:b6:86:a6:6c:b4:43:73:65:8b:77:cb:fe:
                    7e:a7:fd:a3:83:40:4b:75:f5:75:a1:b5:b3:30:03:
                    d3:9d:87:e8:8e:76:2f:7b:92:d5:38:55:4d:1c:12:
                    76:68:d6:13:1c:37:89:33:52:c3:b0:2b:30:0c:ff:
                    c1:67:0e:75:29:ba:b4:6a:aa:0f:62:ec:70:a9:85:
                    02:d5:e5:e6:86:e6:84:a0:a6:3c:88:aa:1a:fa:64:
                    e8:20:1a:da:af:29:b7:cb:35:11:0a:ae:b2:12:21:
                    30:6a:f5:5e:d3:ad:67:20:9e:2f:3d:0d:03:fd:16:
                    17:f3:9c:28:87:93:19:c6:d1:90:11:25:19:86:bb:
                    20:07:66:ad:60:66:56:d8:11:64:05:5c:b3:3d:e3:
                    e3:c4:ef:31:9a:5e:4f:b0:2d:18:82:9a:84:ff:40:
                    f5:fb:ea:f5:b0:13:ce:a6:a0:d9:b9:65:8d:06:96:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0D:95:FD:D7:5E:F7:AB:49:6B:B3:2C:6E:2D:60:93:5F:B5:F1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/1ad21c0b-e01c-3049-a221-0f6391386cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:35:a2:34:e4:b8:88:ee:dd:51:2e:81:ae:7d:2f:84:9e:5e:
         b1:53:28:43:dc:3b:e8:f1:f2:42:5f:d7:85:e9:1a:8b:86:29:
         9a:59:8b:61:cb:97:55:81:aa:5d:d5:de:98:45:1a:73:1a:b4:
         78:38:8f:4a:31:f4:b7:5c:9f:8c:0d:13:7d:ac:f8:5e:26:d6:
         e5:fc:4b:62:22:3f:63:c5:43:8e:2c:4e:26:5e:9e:f2:4c:6f:
         b4:c7:2e:de:b3:5d:22:a1:f8:94:ef:24:cd:88:54:d3:39:9f:
         dd:c0:b1:8b:65:b7:80:77:58:01:59:98:e3:c7:be:a2:79:97:
         64:f9:8f:80:02:a4:5f:ea:1f:63:a3:09:56:86:ea:ad:12:6b:
         0e:b2:70:63:d9:bd:6e:be:f0:e8:80:3e:83:f3:b7:52:1b:30:
         c3:db:9c:88:46:5c:f0:7b:0f:c5:87:e2:09:a4:27:05:e8:52:
         aa:3f:a2:f6:8a:8b:db:e5:90:b4:8e:45:38:58:d2:94:f6:5f:
         55:a8:d3:ba:51:0a:10:3d:f8:80:4c:39:5b:17:2f:2a:9f:0f:
         d1:9a:86:35:ba:bd:e4:b9:d4:b4:47:fe:96:3a:b7:68:a0:40:
         72:3f:03:8d:ca:42:17:6f:fe:1f:8f:d1:5a:8d:39:42:8c:31:
         a4:a3:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:23 2025 by rpki-client