Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6536f780-2490-3f6f-bf94-a1840f95ed84.roa
File:                     6536f780-2490-3f6f-bf94-a1840f95ed84.roa (raw, json)
Hash identifier:          W8eAyqYTePY4Jatt3p3tjG5dvBpf3n6oXTVp038qD5I=
Subject key identifier:   6D:4E:F9:65:F7:EE:84:45:87:7B:AF:24:D8:3E:39:C3:FF:E2:BC:F7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964D365656AA4A553E23A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6536f780-2490-3f6f-bf94-a1840f95ed84.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        174.85.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4d:36:56:56:aa:4a:55:3e:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=df53f2f3-f1df-4b5f-b800-339d298361e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:93:68:a4:85:cf:af:de:ce:1d:f4:a7:9e:
                    4e:30:41:04:73:df:e2:01:9d:f8:42:e7:0e:f7:fa:
                    e7:e5:72:d1:1f:6e:5e:7f:5d:94:5c:53:aa:d1:5b:
                    12:0b:97:70:ae:77:b0:0a:0d:17:b5:00:5e:b1:30:
                    91:93:e0:8a:67:00:4a:e1:77:74:02:cf:e4:40:e5:
                    0b:8f:e6:24:03:51:45:55:ce:dd:67:01:52:60:2f:
                    52:9b:5a:f1:9d:a9:ac:6f:4b:e4:4f:08:e6:43:60:
                    21:0f:ab:8a:c9:9f:e0:3f:36:4e:6e:df:75:50:63:
                    ba:03:c0:fd:e5:89:de:80:aa:de:83:84:82:26:fb:
                    92:ba:63:f2:96:b4:b5:29:01:8b:43:0c:61:cc:f7:
                    7b:51:f9:a5:13:8c:16:b4:e7:b4:13:49:42:61:48:
                    30:32:63:30:c3:0a:cf:93:bb:75:e7:f7:2c:dd:02:
                    70:c5:e1:7e:d7:ae:55:a9:d7:04:75:bd:ed:bd:fa:
                    19:65:98:e1:dd:5c:61:f1:f5:ed:bb:6a:f6:e8:0d:
                    cd:c4:cf:3a:93:6c:d4:88:4d:73:55:ec:b6:5b:0c:
                    2e:f1:76:6d:90:cf:ff:a8:3d:fa:e1:6b:cb:33:9f:
                    ab:d0:5d:59:0a:fb:4c:ed:38:48:02:89:e9:a6:90:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:F9:65:F7:EE:84:45:87:7B:AF:24:D8:3E:39:C3:FF:E2:BC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6536f780-2490-3f6f-bf94-a1840f95ed84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.85.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:eb:80:22:85:e2:87:10:c2:ab:72:67:ac:79:28:d4:bb:
         5b:be:73:7f:eb:b5:81:64:03:da:7c:cb:84:ff:0c:ad:b5:d1:
         df:98:e2:f7:1c:50:a0:1b:ad:d5:52:94:83:91:5e:88:31:90:
         e7:c5:45:72:17:82:d8:f5:38:a0:36:f4:90:05:62:a4:6b:36:
         63:4f:8d:62:e0:86:15:5f:cd:f7:4a:82:f1:db:a1:9b:01:c7:
         ff:55:60:76:f1:1d:be:a6:e2:ae:8f:6c:8d:10:f0:0d:7b:76:
         46:a3:83:69:34:fa:96:88:89:39:79:d6:85:70:4c:09:3e:08:
         bb:69:c3:0e:9f:47:ed:68:fd:24:7d:b6:0e:ce:55:55:0a:1a:
         37:c8:50:4c:a2:7e:6f:99:ef:b6:a7:ca:cf:a7:6d:e4:55:69:
         6a:cd:39:1c:2d:d2:d4:d7:9e:1f:4e:9a:4b:29:ad:0b:c0:72:
         d6:49:e4:e7:58:4d:17:e2:c3:fc:9d:fe:a2:38:9d:e2:c0:33:
         76:b9:34:94:bb:ee:42:78:01:51:c2:34:7f:93:f5:90:ff:ab:
         ba:44:35:0d:15:3b:50:de:86:0e:da:9e:8b:c7:88:9c:b1:31:
         40:1a:85:d5:01:12:d6:50:42:94:5e:aa:b6:8d:94:15:06:fd:
         0e:b0:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:14 2025 by rpki-client