Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
File:                     e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (raw, json)
Hash identifier:          Z6q5M//2wuJJIjfvLfOqMymouqBaB0XDnn8eHwYUuQM=
Subject key identifier:   BC:70:67:67:90:56:D7:22:F4:7C:96:FD:0F:F5:BD:B7:6B:34:28:6B
Certificate issuer:       /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
Certificate serial:       010D0C9F4328584A0D6A9553A214AFFAE2DEE600
Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     399293
IP address blocks:        192.140.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:95:53:a2:14:af:fa:e2:de:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=e450eb7b-5737-43ed-b7ce-ec8838f376b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:77:63:5b:46:d7:ab:2c:6d:55:b5:e6:13:
                    04:36:ab:c2:80:50:30:00:fa:0d:48:05:ca:7e:69:
                    86:47:da:0d:00:9e:51:b2:ac:35:57:bc:97:e8:2b:
                    30:35:f5:10:65:13:df:33:3b:c0:88:e9:0b:60:84:
                    77:ea:15:6e:fd:19:2b:e1:45:4c:22:c4:61:d1:f5:
                    a3:e0:d7:88:6e:29:7c:75:32:ae:93:35:28:7d:2a:
                    24:19:50:59:1a:3d:cb:8a:49:57:66:1e:b9:9c:0d:
                    3e:b5:9c:6e:fa:d9:f1:29:80:e7:89:cc:98:b3:8b:
                    e4:50:22:2f:a7:f3:94:a5:fb:42:e2:79:81:62:57:
                    77:a2:76:ea:f8:30:0d:8e:b3:c0:a1:8a:3b:6e:46:
                    5d:8f:f9:77:b5:5a:e7:4d:8d:de:be:e3:84:51:b6:
                    32:fc:79:51:63:52:ca:7e:85:9b:a1:da:63:92:e7:
                    81:3a:37:59:40:c2:94:df:cc:d6:c7:8c:38:b8:5c:
                    11:a1:d6:40:41:4d:fb:64:8e:58:3d:f4:9c:b5:bb:
                    c7:47:57:0d:ff:31:1c:14:de:ca:13:e2:51:a6:cf:
                    a8:25:b5:9b:6d:13:c6:a6:14:06:87:f5:b1:77:2b:
                    f7:30:7e:c8:1b:2b:ec:6d:ef:93:3d:73:40:c2:a7:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:70:67:67:90:56:D7:22:F4:7C:96:FD:0F:F5:BD:B7:6B:34:28:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl

            X509v3 Authority Key Identifier:
                keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:42:fb:ca:c8:fe:51:c4:6b:86:5f:42:26:e2:1f:c0:21:1e:
         c0:33:fc:f8:6d:d9:f5:98:52:3d:4c:d3:b4:78:73:13:f8:a6:
         d7:ea:0d:14:97:68:78:f9:ee:80:0b:a4:fb:c0:d5:5f:69:2e:
         46:8e:44:21:67:c4:d9:02:ea:3c:50:8e:cb:e5:11:2a:f0:48:
         8d:16:e6:24:59:b9:24:82:b4:36:cb:a8:2a:6b:7f:81:a2:ef:
         0d:fe:ec:54:24:62:62:09:66:a6:f0:05:a3:68:2a:be:57:74:
         8b:ca:7f:f6:c7:0d:60:2b:67:fc:ad:1a:0f:0f:77:7e:23:37:
         56:6c:69:29:68:cf:17:b8:39:b8:08:fb:f4:a3:d6:4d:43:09:
         17:50:06:7e:c1:6c:13:68:25:da:28:66:b6:db:b4:d7:d4:b4:
         7e:a5:a1:08:7f:ed:32:56:b5:60:65:71:29:3b:c2:c8:f9:4c:
         bc:2f:c0:2d:0e:85:1a:9d:fe:16:04:02:92:1c:21:7e:7c:85:
         ae:95:ce:7b:fa:53:cd:0d:1a:09:bf:dd:e3:d2:98:7b:8b:95:
         86:73:7c:93:b3:01:47:f6:2f:7b:76:5a:82:c5:27:77:16:43:
         63:6b:53:b8:df:ed:fd:f6:0b:18:fe:89:52:ef:07:2b:5a:35:
         54:cb:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:20 2025 by rpki-client