Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/27a51d07-fdf2-3167-b1b2-4016547016ec.roa
File:                     27a51d07-fdf2-3167-b1b2-4016547016ec.roa (raw, json)
Hash identifier:          bUqfmUb0paINFEbOsM0QOcHCp6J8vezML7VIiIJsAI8=
Subject key identifier:   97:73:82:50:19:23:8E:D3:72:1A:E7:17:2E:61:21:93:97:EB:09:67
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584A8DD5F71A9E4AB9E00117E900
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/27a51d07-fdf2-3167-b1b2-4016547016ec.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     1742
IP address blocks:        128.103.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f7:1a:9e:4a:b9:e0:01:17:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=41080a67-aacc-4d02-ad9a-98b59565a530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:8b:17:fa:17:3a:b9:fb:a3:7b:02:08:23:
                    51:78:65:c8:c2:58:5c:ed:46:ae:7f:ad:94:e5:b0:
                    0a:d1:5f:1f:07:f6:b6:a6:e6:6b:70:8a:4f:7a:3f:
                    1f:f5:be:b8:4a:6e:40:c4:72:8c:22:66:e0:c6:86:
                    70:d5:c8:ef:fa:1e:12:36:13:ad:02:2d:25:33:41:
                    88:50:98:97:ea:7b:12:d6:9d:5d:35:67:d2:32:88:
                    66:6d:ac:97:69:67:4d:5d:a9:14:16:f3:50:02:f9:
                    c7:84:2c:fd:bb:e0:16:8c:e4:d7:37:94:f1:11:97:
                    36:77:fb:a9:09:ba:6e:1c:02:53:03:92:5b:aa:a4:
                    d9:09:d6:64:49:5a:97:eb:b1:af:4f:dc:91:f7:4e:
                    5a:7c:ac:4c:d7:b1:c4:cb:61:fe:34:85:b2:ff:96:
                    f4:90:96:d7:94:e1:76:cf:c7:bb:ea:fa:ae:2d:11:
                    a7:91:2a:56:4d:07:68:65:aa:ee:3a:c2:d4:83:f1:
                    2c:1d:e5:7c:54:69:0b:46:66:06:09:67:11:b0:4e:
                    66:78:be:32:17:1d:3b:66:2b:3c:92:90:d9:5f:6c:
                    5d:f0:7a:ae:f6:ce:30:67:bf:9b:27:76:6a:ce:36:
                    6c:43:95:ea:e6:a7:e9:89:26:38:35:ae:55:9e:3c:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:82:50:19:23:8E:D3:72:1A:E7:17:2E:61:21:93:97:EB:09:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/27a51d07-fdf2-3167-b1b2-4016547016ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:3e:36:09:04:37:d3:3d:95:76:0c:0b:91:50:91:e2:5e:
         af:c9:f8:d9:a2:9d:fa:43:12:49:75:ce:f4:a3:dc:c2:46:37:
         19:af:2d:94:b8:31:49:d4:77:64:7e:86:47:6f:00:81:16:d8:
         de:78:22:0c:1c:29:eb:55:97:d0:c7:b1:56:40:a2:ff:39:4d:
         b5:31:f4:c0:9b:94:6e:d6:ff:f3:4b:8f:55:26:57:7a:85:70:
         ec:aa:3d:b1:18:a2:ec:9d:b6:2b:4a:2b:8e:b1:ae:1d:0c:de:
         7a:ef:9d:b2:1a:99:d2:f0:7e:14:e0:30:37:47:d5:6c:c9:b6:
         90:73:08:0e:53:92:8e:12:3a:d2:b3:fd:e9:26:f7:c4:1e:d2:
         dc:9f:f8:c4:23:38:f1:63:63:e0:ea:bc:07:ab:17:ea:d1:83:
         df:3d:7f:db:6f:fa:05:69:e6:ee:39:36:05:07:69:9c:f5:b4:
         55:b8:cb:e3:6c:85:f5:a8:4e:09:04:4e:88:06:0a:bb:7f:3f:
         94:07:43:92:59:f7:de:0f:6b:64:8a:0a:7d:0c:35:c1:0f:43:
         e7:8d:56:b7:73:5c:b7:9b:71:92:a8:ac:3f:9f:7e:e3:ce:d2:
         21:39:ef:80:91:a5:57:2b:3c:c9:0e:96:62:ba:92:43:5a:39:
         2a:a4:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:07 2025 by rpki-client