Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa
File:                     3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa (raw, json)
Hash identifier:          rYXRvkzTQd8t44xUMw/uBo/oE12cA+mDzUNEcmZchjw=
Subject key identifier:   C8:CB:95:89:3F:6B:87:F0:6D:13:64:80:F8:2E:54:9F:1B:F0:DE:B2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584ABD4BA40F16AFEDA4808312B0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     7018
IP address blocks:        142.147.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a4:0f:16:af:ed:a4:80:83:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=62a4cede-d2aa-4ed0-98ee-2dcf12684440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:c9:aa:fd:5a:0d:e7:72:ca:0d:62:68:46:
                    8e:24:27:ca:90:f6:94:2a:f5:24:fd:27:e5:ef:80:
                    8f:d5:cb:d7:87:90:84:a8:21:96:52:93:6a:68:02:
                    9c:11:e7:9b:13:7c:64:08:60:d6:d4:c3:8b:bf:8e:
                    75:51:13:47:f8:0b:c9:04:4c:3b:1c:fd:5c:02:f9:
                    db:43:95:48:11:83:7a:0c:08:5a:68:a0:51:a9:37:
                    2e:40:09:c2:47:29:45:6a:0a:fe:42:1b:11:da:e5:
                    e8:2c:a8:fa:1c:57:4c:a6:dc:59:a6:46:77:e5:02:
                    b2:4b:27:26:5e:44:a4:ac:35:83:6f:df:8e:1a:e7:
                    14:39:4c:62:cd:4b:0e:9d:73:23:5c:53:7a:34:98:
                    7d:01:7a:82:77:4e:d6:ad:2b:39:85:98:5e:b9:ad:
                    cb:0b:8b:4b:f9:34:6d:c3:fb:45:6e:b2:bb:fb:7e:
                    dc:76:29:0b:13:da:ef:12:ac:5b:c0:6e:5b:a2:9c:
                    d7:97:3d:46:45:fd:fe:18:da:fa:25:95:b5:9c:31:
                    6e:78:a0:e5:d4:07:9d:ac:95:6d:bf:df:6b:4c:16:
                    65:6a:35:72:95:3e:0b:cf:da:18:14:b2:9d:26:6c:
                    ca:14:b6:85:9c:55:38:70:f5:56:70:a9:73:20:9a:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:95:89:3F:6B:87:F0:6D:13:64:80:F8:2E:54:9F:1B:F0:DE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:27:49:8b:4e:9d:f4:c6:8c:b4:2e:ef:10:e8:90:56:11:45:
         1b:a1:0b:01:75:a5:cf:4e:16:90:dd:5d:a7:cc:5b:1e:40:66:
         54:dc:c2:a1:7c:22:f3:b9:d3:89:42:7f:be:f5:b7:de:92:57:
         95:b8:b9:98:b5:7d:b8:04:16:77:bf:e1:fc:78:6d:e8:fd:8e:
         40:37:b4:7f:29:3d:78:47:f3:a8:0c:d7:91:57:6b:89:e5:59:
         01:b8:89:b8:32:fa:82:95:4c:b3:ae:9f:68:ac:e4:ec:a9:40:
         4a:a3:93:0c:fc:16:9c:6b:84:71:7a:68:64:e7:51:4c:43:d3:
         9b:c8:58:1f:11:a3:79:7e:64:2a:ce:37:6a:d6:54:8c:6f:fd:
         64:63:8c:92:b2:8c:ee:45:4e:55:51:65:b0:52:e2:68:9a:e1:
         e5:c3:36:55:d1:5f:24:58:44:f6:ca:b2:3f:f7:8e:ac:ac:35:
         69:99:66:13:15:3f:c8:30:61:69:28:37:e8:80:d7:04:19:f8:
         60:8a:cf:83:5b:86:04:b7:3d:a3:e4:73:24:6a:b1:20:38:05:
         8e:0b:fd:3f:73:87:16:d2:9c:ad:be:ad:ba:ce:ba:7e:2e:4e:
         e1:11:d9:65:a4:c1:d5:42:8e:90:9d:f5:ec:e2:d7:16:1b:ad:
         66:52:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:07 2025 by rpki-client