Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/930999ae-f578-32bf-91bd-5342e22048ce.roa
File:                     930999ae-f578-32bf-91bd-5342e22048ce.roa (raw, json)
Hash identifier:          GZDfQsUT1FBkqmaOlmU+qmtMQ8zn0pTN337BhR3DoC0=
Subject key identifier:   28:05:14:2E:21:D7:78:78:61:AA:26:EC:E3:33:31:68:8F:8A:EE:87
Certificate issuer:       /CN=7eea862e-9b02-4c2a-9cb9-f7c1375fa604
Certificate serial:       010D0C9F4328584AAB26690824348CAD408056A0
Authority key identifier: BE:49:C9:84:4B:50:F1:4E:44:05:2F:96:D1:5B:B2:8B:CC:7F:B6:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/930999ae-f578-32bf-91bd-5342e22048ce.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     63279
IP address blocks:        170.39.203.0/24 maxlen: 24
                          2602:806:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:69:08:24:34:8c:ad:40:80:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eea862e-9b02-4c2a-9cb9-f7c1375fa604
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=7385a773-cec6-4351-85d9-4ded2d49cc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:01:93:33:e0:ef:49:c7:58:7a:e5:1b:f7:
                    7d:b5:6e:15:a5:fe:a9:ab:22:c3:ac:b7:0c:67:e6:
                    5b:44:50:aa:54:9f:85:cb:02:29:85:4f:fa:3f:04:
                    f5:e0:f6:2f:8a:f7:1b:ac:4e:33:bd:83:9b:33:4b:
                    b8:92:3c:8e:cd:33:fb:a7:79:20:93:28:ff:3b:1d:
                    59:2c:c3:48:5a:e4:79:8e:0e:c4:6d:6a:c9:26:2e:
                    16:2a:b7:b7:de:bc:fb:c7:6c:68:2a:00:d8:15:fb:
                    29:b8:d1:46:e8:18:68:86:6f:4a:94:9a:48:3c:94:
                    ba:1a:d4:65:51:fd:6e:5d:af:c1:43:ed:83:d2:36:
                    2f:7c:f7:e4:d3:23:82:e1:ac:eb:52:27:20:aa:f5:
                    d6:5b:01:f6:c1:b5:4b:97:49:25:fb:b4:c0:19:66:
                    fc:90:7a:85:05:b9:3b:fc:fb:d7:ed:3c:ea:9c:60:
                    c9:2a:a7:20:dc:b2:87:f1:d7:4b:11:8e:ab:a2:f3:
                    0c:6b:09:b7:bf:d8:13:22:51:50:56:0e:78:02:62:
                    a5:fc:2a:74:6c:0d:83:65:3d:2e:36:83:2d:22:7c:
                    1c:98:57:d3:3b:7f:c4:d7:93:fd:df:95:18:e2:00:
                    77:1c:85:80:67:dd:c4:36:c9:82:8e:fc:86:c5:2c:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:05:14:2E:21:D7:78:78:61:AA:26:EC:E3:33:31:68:8F:8A:EE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/930999ae-f578-32bf-91bd-5342e22048ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.crl

            X509v3 Authority Key Identifier:
                keyid:BE:49:C9:84:4B:50:F1:4E:44:05:2F:96:D1:5B:B2:8B:CC:7F:B6:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.203.0/24
                IPv6:
                  2602:806:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:33:2d:9f:cf:67:cf:5d:f9:4a:82:45:f0:d4:1e:95:31:8d:
         24:c2:35:60:87:a5:44:35:55:63:07:3f:1c:03:77:25:6e:f1:
         82:71:a6:dd:8d:57:b3:ee:f9:d3:29:73:8f:2e:46:ef:7a:d9:
         7b:8c:61:72:48:d3:bd:fe:e3:09:19:4b:3a:91:c9:d2:56:35:
         50:cb:9c:c6:51:71:42:e3:e2:2a:8f:bf:3e:e5:28:98:37:6e:
         99:df:d1:ff:74:93:45:e0:08:71:70:72:1a:88:e3:fa:5e:69:
         7a:e1:03:91:98:1f:aa:c1:ab:3e:6b:e7:97:cf:7c:48:5c:b3:
         7e:c7:ac:5e:68:26:74:6f:cd:38:18:eb:7c:a9:89:61:aa:8e:
         01:ba:0e:82:86:97:11:0e:a0:1d:d0:89:79:59:88:5d:45:81:
         28:e4:4d:64:08:ad:d6:0d:bc:6b:d8:9f:dd:fd:e2:41:6d:bd:
         15:41:4f:39:d2:bb:b3:ae:e4:1b:02:41:0f:ea:fc:28:b4:f3:
         b4:c9:05:95:dc:23:7e:44:26:8e:90:22:09:89:6f:6d:9e:3c:
         fc:cb:ed:a0:69:65:a1:da:31:e4:a0:a4:7e:08:12:86:04:4c:
         9f:da:1b:31:2c:cf:a0:89:31:8e:bf:17:d4:6b:4b:72:bc:b0:
         f0:12:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:20 2025 by rpki-client