Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
File:                     a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json)
Hash identifier:          oTEEtG2U23A4LGwYMB1oH0mglsW8YQlgtjW+ktSLbhI=
Subject key identifier:   4B:DF:4B:3E:59:CB:17:29:DA:BC:92:ED:B0:19:85:F0:47:96:1E:04
Certificate issuer:       /CN=3b24522b-8239-4bb9-9845-1e01e28aa452
Certificate serial:       010D0C9F4328584A77808D787691E82F7EC73C80
Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     32854
IP address blocks:        169.197.172.0/24 maxlen: 24
                          169.197.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8d:78:76:91:e8:2f:7e:c7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=f328d5ac-2ec9-4c9e-8f20-ba5ef152d1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:0b:34:c7:9c:94:96:9c:ce:b1:33:d0:02:
                    d2:4a:b8:38:95:44:91:5f:2b:e7:5a:8d:12:4c:14:
                    50:0a:cd:a9:bc:91:1f:28:07:81:e4:9b:b5:3a:47:
                    c3:ea:33:ef:bc:b4:00:0f:2e:b1:56:89:90:10:6a:
                    47:63:9f:f8:a6:4c:1f:a4:82:0e:f1:7b:af:d3:c5:
                    85:65:5f:d5:ad:ca:4e:e8:0c:2f:1b:73:d0:0b:2d:
                    d3:1e:14:73:a9:ed:28:c7:57:1a:fb:dd:2f:79:62:
                    2a:25:0d:9a:c8:de:48:c6:6f:2d:48:e9:63:93:c1:
                    86:db:96:ca:fd:34:2b:e8:be:7c:37:d8:ec:39:77:
                    6a:92:34:58:18:c4:bb:2c:68:b8:f9:5b:ec:0c:73:
                    09:3a:c6:37:d5:f6:39:97:90:70:1a:b5:ad:34:50:
                    ab:f1:d7:3e:36:0d:bb:55:4b:fd:0c:0b:59:cb:a8:
                    45:91:16:57:ce:66:8b:a0:51:73:b3:1f:be:2a:34:
                    ed:e7:55:b9:94:39:44:23:b2:12:d4:e9:62:c1:bf:
                    12:be:7e:52:e0:19:9f:ac:05:c8:ad:11:a7:9b:aa:
                    c2:10:c4:ac:cb:10:8f:70:c2:41:fa:25:ce:e0:93:
                    0a:92:ff:62:4e:71:17:64:7a:d1:13:3c:84:81:39:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:4B:3E:59:CB:17:29:DA:BC:92:ED:B0:19:85:F0:47:96:1E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2d:5c:fd:46:98:84:6a:7a:7c:30:c9:59:e4:ee:ec:63:fd:
         c0:8f:af:51:be:d7:2b:92:be:4b:0d:26:05:ea:36:a4:52:d9:
         f2:29:41:df:ec:50:59:28:3d:5b:05:37:ea:32:2c:f6:df:12:
         2d:10:78:fb:8a:e6:91:d9:91:b3:31:87:e3:c8:72:30:66:86:
         00:ee:19:18:83:46:fe:72:70:dd:c6:99:a9:00:52:35:6b:ba:
         aa:2d:8f:47:cd:c6:eb:b0:44:7c:31:6b:02:20:f5:f5:2e:26:
         56:05:b1:0b:00:5b:88:e7:46:71:e4:da:49:ab:e2:23:f3:3a:
         18:3e:98:ba:9d:5e:19:79:05:85:fc:16:6f:b9:b3:09:e2:80:
         a3:c5:e9:28:15:4b:8d:41:ba:bf:cb:51:82:ee:b3:18:d7:32:
         c8:db:88:a0:c6:30:fb:21:44:d5:5c:88:6d:70:7e:bb:0b:0d:
         68:6b:f8:ae:6e:c7:04:bb:1d:a9:7c:3c:67:cf:66:dc:37:c3:
         9d:f8:c0:22:d7:16:e7:4a:70:ae:cf:e1:c3:e8:90:cb:77:02:
         51:35:24:d2:47:45:bc:20:be:df:c1:4d:97:1c:22:16:b4:79:
         9d:df:cb:31:9e:7b:75:99:9c:73:33:e5:9f:b8:b9:d0:35:77:
         27:a7:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:21:10 2025 by rpki-client