Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/942682ac-ce3f-3924-8e37-71856560996d.roa
File:                     942682ac-ce3f-3924-8e37-71856560996d.roa (raw, json)
Hash identifier:          I3wSlbSvO62j80sVtaWmnpnjZgR9g7sqn4WH4aYTQ2M=
Subject key identifier:   CB:20:E3:07:61:C4:E5:96:AC:F3:2A:F0:0B:02:B2:1D:A7:3D:C0:30
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584A8CC94197DDFBD9AF8A887280
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/942682ac-ce3f-3924-8e37-71856560996d.roa
Signing time:             Thu 17 Jul 2025 15:59:26 +0000
ROA not before:           Thu 17 Jul 2025 15:59:26 +0000
ROA not after:            Wed 15 Oct 2025 15:59:26 +0000
asID:                     198949
IP address blocks:        128.103.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:c9:41:97:dd:fb:d9:af:8a:88:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jul 17 15:59:26 2025 GMT
            Not After : Oct 15 15:59:26 2025 GMT
        Subject: CN=0aa9031a-3c19-4281-beeb-35201a6e3fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:50:9e:db:f8:b8:79:73:22:7e:be:43:7a:80:
                    5d:65:a6:f6:12:bc:d7:5e:73:37:7b:c1:54:74:4c:
                    df:9a:57:ac:44:7e:ab:7a:ad:8a:d6:d8:be:e3:04:
                    15:86:e4:6a:b2:79:22:b8:a0:01:fd:7a:c9:2d:b6:
                    f0:94:d8:99:34:03:a7:43:3e:b2:71:c5:23:69:2d:
                    af:14:5b:0d:2c:7a:fa:0c:55:2b:9c:9c:3d:c9:c7:
                    e7:8c:c7:96:fc:1d:97:5d:7f:fe:21:54:ea:70:fa:
                    d2:4d:25:0f:54:1c:4c:e4:42:27:7e:dc:be:c1:07:
                    71:8a:f7:87:5c:bb:41:b4:d6:53:78:6e:b5:57:24:
                    1f:b8:88:a2:2d:c7:b1:46:e2:91:92:88:4c:d3:e9:
                    d7:c0:2a:e8:07:c2:ad:41:f8:5f:b9:77:4b:ee:fd:
                    8f:7c:1a:3b:db:ca:8b:bb:3d:4f:28:06:4f:0a:fe:
                    2c:b5:f3:30:c4:a2:89:d6:3d:a1:7e:a6:27:31:ab:
                    28:1e:be:bf:ad:de:40:a3:02:40:5f:97:59:0c:bb:
                    d0:85:8a:0b:e4:94:e9:fe:15:37:4d:fa:b2:33:47:
                    1f:41:67:0c:a8:0f:ee:81:62:d1:cb:05:3f:c5:25:
                    ec:b1:26:fe:8c:81:df:7c:63:89:eb:06:30:71:5b:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:E3:07:61:C4:E5:96:AC:F3:2A:F0:0B:02:B2:1D:A7:3D:C0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/942682ac-ce3f-3924-8e37-71856560996d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:a6:1a:d8:7e:eb:67:55:0f:21:53:0a:96:77:79:60:ea:
         9c:5d:e6:41:5b:23:68:62:1e:21:da:ed:96:ca:fd:73:ca:b8:
         b5:69:ca:58:6a:d7:71:3b:a8:c4:04:5f:e8:9e:42:39:84:03:
         f6:6a:6c:f9:00:4f:c1:0d:74:3e:ec:c8:72:20:12:d7:4e:de:
         1e:de:fc:09:4e:76:9f:89:40:51:b9:69:ee:2c:5b:99:a4:23:
         88:90:b6:41:33:07:0b:6d:b9:53:9e:01:9e:ee:88:95:97:31:
         d7:aa:3d:28:8e:48:d4:c0:eb:11:e8:36:c3:67:73:b8:63:74:
         ba:7e:47:f6:45:a2:60:f1:88:18:ac:b2:ae:a0:18:79:1c:f9:
         f1:ba:e4:4c:1a:ab:a3:3a:03:c1:7d:cd:30:60:d2:c2:7e:3a:
         5f:92:7b:99:b7:a5:8f:91:8a:24:b7:de:c8:4f:60:d6:e7:b1:
         3a:78:89:80:e5:e5:00:ca:12:24:16:3e:2b:0b:59:f3:63:ec:
         68:a0:4c:78:a1:42:60:f2:de:71:f0:89:28:d0:0a:39:9e:a4:
         08:b0:c5:ac:ea:18:ed:df:bb:1d:eb:11:89:61:de:68:1d:ce:
         9a:c1:19:7b:63:f8:fd:a9:b1:15:e4:12:b6:cd:32:f1:74:47:
         a5:ae:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:08:27 2025 by rpki-client