Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa
File:                     5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa (raw, json)
Hash identifier:          vXVDO0CoxNiGmBH99yFHOXCJVBqv5WbNfCXNYcw/4RU=
Subject key identifier:   F0:EF:82:D3:C8:FF:44:F3:45:5E:53:BA:F7:95:7E:03:8A:C2:0B:3A
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584A0D6A969FF1FEE15FC5C4B300
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     1742
IP address blocks:        140.247.179.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:96:9f:f1:fe:e1:5f:c5:c4:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=9defab70-653a-4d0a-8e60-497dd02261dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:dc:f5:bd:ed:e6:77:c3:86:54:3f:7e:5a:
                    76:e4:46:96:75:05:3a:5b:17:5c:5d:40:2b:13:4c:
                    ce:f4:96:93:dc:d3:e5:d1:80:5d:1e:ed:37:27:f0:
                    e7:2e:de:33:94:5c:7c:a4:53:8d:3b:23:cd:5c:ad:
                    66:9a:9c:de:3f:48:17:11:01:e5:2f:a4:3e:f7:4d:
                    ff:d7:ff:25:3e:05:a9:eb:23:60:79:be:f7:d7:e3:
                    62:20:09:c2:43:1d:75:1e:da:dc:94:76:5c:fd:bc:
                    96:9a:a5:03:48:14:b5:1f:e7:44:6f:65:86:0e:ae:
                    75:15:b0:ef:2c:b3:e3:30:6a:7f:5d:4d:bb:34:4c:
                    c9:ea:13:1a:4e:30:d5:67:2a:cb:de:a7:7f:4a:17:
                    d9:54:99:49:dd:56:57:68:12:cb:a8:b0:57:59:bc:
                    d4:eb:d2:05:68:65:29:4f:3b:4a:ea:50:50:32:0e:
                    5d:dc:8d:92:ff:28:b0:2e:77:2e:c7:39:36:52:ab:
                    1e:ca:e3:35:b8:b3:96:7d:6d:c9:3e:b7:89:75:b4:
                    6f:bf:2e:aa:63:2c:cc:f5:0d:6d:91:1f:e5:e3:c7:
                    b2:ad:09:ff:91:80:59:df:75:ed:e1:a7:a5:8d:c8:
                    24:88:ee:41:30:d1:73:47:25:f2:ec:73:b9:69:18:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:82:D3:C8:FF:44:F3:45:5E:53:BA:F7:95:7E:03:8A:C2:0B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.179.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:37:56:4d:a4:c1:69:31:20:86:be:74:10:e6:48:dc:07:1c:
         c3:e1:2f:57:e7:cf:86:39:7d:14:55:e8:f9:86:d0:65:64:1b:
         15:b3:3d:fe:62:b3:68:4c:63:30:44:af:36:8c:60:3c:ad:5f:
         89:94:05:8a:43:b7:9b:9c:3d:72:2c:59:7e:c2:e0:ba:ae:62:
         a8:db:89:2a:5b:cc:75:0c:f4:71:cf:7a:ad:bf:d7:18:b8:cd:
         0c:0f:dd:60:6e:52:4c:93:e2:ee:91:4a:2d:89:e7:f2:bc:d5:
         35:bd:24:8e:ad:98:17:f1:04:36:71:75:f2:70:40:33:36:3f:
         08:36:10:0b:29:aa:26:40:88:18:5a:7c:2e:36:2c:8e:e2:fc:
         54:af:4a:22:d3:68:40:71:61:8d:50:7e:02:d8:28:d4:cb:26:
         ab:b9:ca:52:a0:6c:fc:23:c2:01:28:00:69:3a:66:50:62:0b:
         5d:89:15:27:c7:fa:41:09:88:a0:a6:c7:59:61:6c:b6:3a:28:
         b4:92:3e:33:d9:c7:d9:89:be:b3:30:6e:3f:6c:eb:db:a5:06:
         21:08:37:92:07:d1:47:de:dd:8b:32:a6:fd:47:b8:ac:23:dc:
         72:00:25:0f:f5:b3:82:5c:8a:88:3d:f6:3c:c1:a5:f2:42:07:
         0a:dc:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:08 2025 by rpki-client