Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa
File:                     8578f51c-1b6a-3105-b746-5bdf914f63b4.roa (raw, json)
Hash identifier:          Nb3FHu/pqq1WFan6su8KmoRX0iFkG5HwmtthckwI0Nk=
Subject key identifier:   44:71:64:9A:40:37:39:ED:CA:CE:93:D7:BA:77:10:F9:E5:92:15:2C
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584AB91B8F7D14B3B1D71D428000
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     1280
IP address blocks:        149.20.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8f:7d:14:b3:b1:d7:1d:42:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=bf31be50-6120-467d-95df-773725e67182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:a4:03:11:ef:12:f4:72:e3:c4:54:d1:49:
                    52:b9:7e:cd:9e:8b:0c:25:d7:c5:3b:7e:ed:0c:67:
                    d5:f7:5e:db:ff:1e:a3:5e:f0:0b:01:17:74:3c:07:
                    e8:d2:02:4b:ee:ff:89:11:ac:fe:28:fa:82:f3:ec:
                    e3:db:8d:0e:e5:30:09:4a:77:f6:02:09:15:d5:26:
                    82:35:fd:0f:16:7e:c4:42:39:d9:6e:b5:0c:e0:02:
                    73:21:2d:07:53:31:2e:f6:7c:93:0a:0d:f7:5d:d8:
                    a6:37:0d:91:19:56:9e:10:a5:19:ec:24:6f:cb:a3:
                    6c:cd:60:73:6f:00:e4:e6:a6:a3:12:bf:50:f6:8d:
                    7e:60:b6:e0:95:aa:6b:1c:24:c2:c4:16:c2:b9:30:
                    1c:d4:26:06:13:38:2e:03:c4:11:28:c0:a9:0f:dc:
                    69:66:03:a2:30:28:c7:0f:44:d6:c4:2b:37:3d:56:
                    ee:c4:61:3f:a3:20:2c:19:16:3a:00:17:ce:af:b5:
                    d7:ad:4a:57:43:e0:61:17:19:52:64:aa:45:e2:94:
                    40:41:ef:e9:bc:4c:0b:1d:1f:24:29:58:5e:23:80:
                    f6:9d:af:5b:f0:d4:f5:05:3b:8a:b7:15:ac:e3:f5:
                    41:60:c8:94:a9:dd:45:d8:05:8d:49:6b:ca:b9:8f:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:64:9A:40:37:39:ED:CA:CE:93:D7:BA:77:10:F9:E5:92:15:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8578f51c-1b6a-3105-b746-5bdf914f63b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:bb:7e:ab:d2:21:6f:f3:b0:cb:b2:a7:e8:64:81:fe:ab:
         3d:77:a7:b3:c4:73:09:7b:ad:72:a5:37:ee:f6:c3:2e:21:27:
         46:7e:44:6d:9e:1d:5c:cc:83:a6:3f:cd:b4:c4:e1:4d:37:72:
         fd:2f:3e:12:a0:0a:cd:86:f8:12:ba:ce:3f:99:66:8e:07:cc:
         b1:1f:25:6f:35:ed:4a:57:0d:0f:07:cb:97:ad:9e:d1:b8:47:
         d3:ea:87:a1:7b:b1:41:ba:22:8a:9c:91:40:37:89:34:14:c9:
         13:00:61:4b:09:e2:e8:d2:0e:c4:31:c1:57:b5:95:ad:dc:31:
         be:9c:45:41:04:c1:f6:43:26:7e:72:c7:07:ef:19:cd:90:bf:
         75:66:c4:20:3b:eb:cb:8c:f9:b7:39:31:d8:3c:f8:76:f7:8f:
         a6:25:28:ac:d9:4b:a6:9a:e9:24:f4:f3:63:89:e5:9d:78:ab:
         f2:f2:6b:af:96:65:65:88:99:fb:9f:ce:d9:1d:3a:b5:66:da:
         d3:9b:81:c3:f8:8f:81:26:40:3f:e1:86:70:65:04:b4:55:41:
         5d:2a:54:11:64:02:96:4c:01:13:db:cc:07:1e:ce:79:81:e2:
         eb:c3:31:8e:47:7d:3e:19:9d:da:0c:74:47:45:bc:da:3e:eb:
         45:d7:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:06 2025 by rpki-client