Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b71a26d1-4044-3ed9-87ac-7c9445a25157.roa
File:                     b71a26d1-4044-3ed9-87ac-7c9445a25157.roa (raw, json)
Hash identifier:          47lg+11iKZR5k18om6kGLbv06tM22ukjWePdl8lcGXo=
Subject key identifier:   C8:10:03:BB:41:DE:91:E4:46:F3:06:11:49:B3:2E:6C:CA:1A:39:5E
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584AC9DBA6159830D658713CA180
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b71a26d1-4044-3ed9-87ac-7c9445a25157.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     394437
IP address blocks:        205.196.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a6:15:98:30:d6:58:71:3c:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5c3d7188-636b-41f9-9e94-695bfa1e3cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:ef:3b:d8:8a:a7:99:44:95:e7:b9:fc:ad:
                    d2:ea:6e:fb:c4:d0:3c:06:cd:51:9f:02:35:43:29:
                    82:1d:86:3a:df:6a:94:77:0e:8a:36:dd:cf:78:78:
                    cc:bd:1b:0c:76:7c:3b:c5:6b:3e:ce:b6:63:c4:c9:
                    2a:1f:08:2b:15:39:13:c7:a3:2a:6a:69:a0:c7:47:
                    c7:57:7e:79:f5:74:0f:cb:50:5a:f2:a8:6a:3a:93:
                    19:ee:03:e8:ad:9d:73:a8:57:56:00:70:33:b0:4a:
                    1b:1d:b0:2b:c7:db:f2:93:ce:f2:ed:3c:41:3a:a0:
                    79:df:a2:11:10:82:46:88:fa:aa:b1:38:42:a1:9f:
                    bd:63:60:05:9d:9b:d2:94:ab:6e:a6:d5:f7:48:67:
                    14:0b:c7:30:2a:87:7d:eb:07:f1:1d:d6:54:35:9a:
                    09:7b:ca:3e:70:b9:03:89:4c:7c:04:b2:d8:e1:e7:
                    06:bf:0f:0b:78:e5:cd:55:2e:77:d9:f0:81:46:23:
                    c9:d8:d1:14:a0:3a:35:5e:22:84:9f:37:ac:52:e9:
                    9f:46:0e:64:8f:93:ab:3b:12:d8:9a:56:bb:d0:56:
                    1d:a1:e1:7d:94:13:00:64:d7:40:81:c8:a9:38:dd:
                    f0:fb:c9:ef:83:ce:3d:dd:15:30:56:bf:0b:95:e0:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:10:03:BB:41:DE:91:E4:46:F3:06:11:49:B3:2E:6C:CA:1A:39:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b71a26d1-4044-3ed9-87ac-7c9445a25157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:ef:7e:0b:3c:01:a7:99:25:40:6c:b6:7a:d4:cd:64:d3:2c:
         2b:41:09:45:ae:48:35:96:af:c8:c3:de:ca:cc:bc:65:4c:fb:
         06:a5:3a:c9:e9:5f:b8:76:55:1a:1a:98:6d:f9:e8:fa:92:fc:
         37:c7:2f:3e:65:b4:1d:fe:5e:05:0c:3e:aa:d5:36:70:df:4a:
         dc:3c:bb:26:f8:10:9a:a8:5b:c6:62:12:e5:a3:a1:b4:36:31:
         29:f7:d4:c9:a2:73:41:22:4f:aa:05:a2:72:c9:eb:5a:69:61:
         06:37:5d:63:37:ce:61:f4:fa:31:d8:0c:7a:4c:c2:5e:2e:12:
         72:c7:07:88:f5:5f:35:ed:26:36:99:87:35:4a:50:c8:9c:9c:
         2d:db:2c:8a:d9:f1:37:fe:73:cb:d1:45:9b:00:64:c6:03:c2:
         68:09:81:79:e5:50:76:ea:5d:bc:a1:71:03:96:9f:19:bf:39:
         9a:62:04:80:ad:e9:ae:52:ed:8f:e1:79:22:16:e1:87:4f:a8:
         ac:a1:f4:b2:32:63:bd:91:75:a9:9b:a0:cf:9e:a2:5d:d3:0a:
         c8:72:2c:a5:19:5b:8c:37:98:5b:59:f9:a0:39:02:7e:17:a8:
         14:1a:d7:61:c3:c1:26:57:46:40:21:75:1c:65:54:10:af:78:
         d3:72:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:07 2025 by rpki-client