Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa
File:                     c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa (raw, json)
Hash identifier:          gqfzZlD0CUExGTy2gjCtSjoDMWhpglEAOu/9IKFhiFs=
Subject key identifier:   F9:48:0A:6D:A7:94:F2:D9:18:8E:1D:84:2A:59:90:2B:E3:48:4F:DB
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584ACB40ED998CD92E909FAF0340
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     30041
IP address blocks:        207.171.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:ed:99:8c:d9:2e:90:9f:af:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=b5dd65ce-2e12-44a5-8b0b-b882e153f409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:3a:10:a9:2d:cc:16:fa:4f:76:c8:f0:18:
                    60:c6:e0:50:6f:48:54:b3:0b:a7:76:3a:8c:c2:32:
                    3d:35:2f:86:4d:57:69:ef:8c:cb:f4:97:ef:a6:59:
                    a3:d7:28:d3:6e:34:73:86:7d:27:75:b5:72:68:fc:
                    20:2f:7c:c4:6d:44:6c:24:07:c5:a7:b2:7a:19:66:
                    52:67:50:63:14:4b:6a:1b:a6:a5:2b:d8:09:b5:dd:
                    f5:e4:a1:da:b9:c8:37:10:ac:b9:d8:d5:a5:7a:f7:
                    2c:47:36:f5:a6:00:9e:c7:b1:52:84:eb:bd:98:63:
                    20:e6:7a:4b:9a:89:49:b8:33:e7:2f:0e:1d:48:70:
                    d1:4e:97:d8:a5:4d:0b:52:b6:a6:38:06:08:44:97:
                    04:e5:97:43:17:a7:3c:ad:b6:56:73:eb:5b:67:9d:
                    25:80:e1:99:f2:ae:44:44:ec:38:c8:16:b5:41:68:
                    b9:62:50:fd:95:2b:b3:83:d7:2c:45:4f:7e:ee:9c:
                    02:ff:f0:8d:b8:49:e0:22:6c:0e:cc:55:9a:f3:cb:
                    37:a5:0f:48:5c:ec:9b:19:72:c5:78:c1:27:b7:69:
                    32:8b:63:04:e0:ec:83:ae:4f:40:1e:98:83:64:eb:
                    d9:28:c5:f1:c2:52:88:14:ec:5b:09:ed:6d:aa:20:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:48:0A:6D:A7:94:F2:D9:18:8E:1D:84:2A:59:90:2B:E3:48:4F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:82:81:90:e4:26:05:02:8e:0a:e4:53:40:0d:7c:d6:fa:
         17:20:69:20:52:e0:0c:7a:55:ab:ce:7a:8b:af:d1:f3:3c:4b:
         fb:b4:9e:81:cd:59:3b:65:9d:12:a8:bc:0d:ac:88:1d:d5:9a:
         26:4b:90:0b:d5:97:64:25:0e:09:8e:9a:a6:84:8d:d0:22:49:
         fc:a0:22:54:fc:03:31:1c:d0:f8:d1:55:9f:ef:63:0d:dc:b3:
         54:4d:11:52:49:2d:42:06:d0:9b:8e:30:ed:15:f0:7f:a6:4b:
         8a:c7:03:4a:27:4e:9f:7a:21:48:25:78:e7:38:81:f2:54:1a:
         57:89:b8:b5:c3:40:4d:f6:af:43:e1:2b:7f:20:e4:a1:d0:c3:
         95:d1:10:96:aa:94:3d:61:88:7c:68:97:d8:09:9c:c5:68:35:
         58:1e:ec:a6:4e:d6:0b:61:70:08:54:21:02:7e:0b:95:96:e6:
         01:ae:22:9c:8c:1f:4a:1d:84:9d:d4:a9:d8:e7:8a:52:d5:46:
         0e:18:8f:27:cb:a2:50:d9:3e:35:35:95:c1:28:18:af:26:92:
         b9:01:a2:0a:24:0b:f6:8f:81:0b:7b:b9:bc:d6:41:44:5a:d6:
         86:55:f3:52:cb:6d:db:f7:14:86:fd:4e:a7:ee:55:58:73:c1:
         8d:e8:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:52 2025 by rpki-client