Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/2b5cde7b-bd18-388b-8422-68aca968b427.roa
File:                     2b5cde7b-bd18-388b-8422-68aca968b427.roa (raw, json)
Hash identifier:          fBqZnQTvMqg34HaRRnkHjXmqHWERui2oqdoG1ATpYuc=
Subject key identifier:   70:D2:64:7C:2D:F7:9D:79:DC:64:A1:EA:6F:27:D6:D7:2A:ED:63:ED
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F4328584AADF1125C73344C858FFD7CC0
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/2b5cde7b-bd18-388b-8422-68aca968b427.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        134.195.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:12:5c:73:34:4c:85:8f:fd:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=aba55201-a43b-4c30-9e06-93b1b137f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:81:72:7f:ba:05:59:38:61:fd:84:d1:de:
                    47:59:8b:ee:0b:f2:16:ca:c1:30:1b:ba:c8:ac:28:
                    c1:df:d0:f2:cd:6f:71:3c:2e:dd:cf:8b:3d:cb:c1:
                    36:94:3b:3f:85:50:4d:fe:e8:74:e0:1b:10:aa:de:
                    ae:9e:d2:1b:fc:15:90:8e:b3:87:bf:c5:df:1a:63:
                    40:28:bb:1f:7c:7e:56:4e:87:71:6e:9d:12:10:80:
                    c9:9b:81:47:f1:79:21:d5:02:ef:bd:13:94:03:58:
                    1c:77:01:b1:74:b6:cf:97:09:f0:0e:24:35:cc:84:
                    8c:45:f7:27:dc:b3:f4:86:65:c9:75:90:5a:ec:4d:
                    51:93:84:24:4f:c1:ac:42:ac:43:34:18:f9:39:c9:
                    3a:d6:80:d0:9e:4e:8b:18:95:6c:c8:38:2f:c1:2e:
                    ef:e2:ac:4b:20:e2:22:d4:82:ea:bd:69:1f:c1:f9:
                    58:c0:e6:0a:fa:9d:74:c4:3b:97:ea:64:de:4e:91:
                    97:c5:d0:21:0d:b0:bf:fa:d5:c5:61:24:a4:52:65:
                    c9:f4:b5:b7:ba:f3:03:4c:e1:5f:d0:96:48:59:32:
                    83:4d:1a:04:fc:93:df:5e:42:c8:41:65:a3:02:dc:
                    6c:d1:c7:91:c9:ca:20:a1:56:e3:85:a1:4b:9c:0b:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:64:7C:2D:F7:9D:79:DC:64:A1:EA:6F:27:D6:D7:2A:ED:63:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/2b5cde7b-bd18-388b-8422-68aca968b427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:dc:d8:57:a9:c7:14:5f:38:fa:be:7f:32:6c:3a:26:2f:
         84:e0:f5:a5:2f:f4:75:70:db:26:08:3a:c5:b2:ec:93:3d:f5:
         61:6c:07:34:f4:8f:4c:75:6d:a7:b2:60:58:2f:6b:6e:dd:9d:
         98:2d:37:41:f9:ff:db:33:63:d4:1b:37:05:51:a6:c6:77:cd:
         31:b0:cb:39:be:8a:ed:66:14:9d:5e:5e:39:26:7c:eb:6f:42:
         c2:d2:16:fb:0b:11:d8:af:9a:5b:6c:76:f9:f8:bd:ef:d5:98:
         9e:74:e3:b4:a0:6c:ce:8a:95:d3:fa:c0:4c:a1:be:88:da:9d:
         c1:9e:35:6c:ff:a9:9f:2f:9b:dc:9d:77:fd:2d:03:58:c0:14:
         94:8f:9d:11:79:f1:8f:67:b3:1f:dd:00:cb:c4:74:a3:20:b0:
         70:0b:78:cc:48:39:26:70:d7:3b:f9:d4:fd:4c:64:f5:f9:4a:
         38:31:8c:eb:6b:f9:dc:ac:38:1c:45:96:ce:3a:b7:c6:94:5c:
         8f:d7:f7:f6:58:73:ba:98:8f:11:e6:f2:b0:b1:69:61:45:24:
         0c:ea:ae:4c:be:ba:0b:61:0d:76:a8:2d:38:7a:a1:fd:ac:87:
         ba:61:81:20:66:b5:5c:8b:34:eb:70:0f:a7:c3:ee:83:6a:2c:
         15:4f:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:33 2025 by rpki-client