Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/04483737-3da9-360f-9056-a84ebc6d1762.roa
File:                     04483737-3da9-360f-9056-a84ebc6d1762.roa (raw, json)
Hash identifier:          O+Tio23ax5Ct/FKJyjhwxqU8UjzZx9nSen6Al8RH/co=
Subject key identifier:   45:6B:23:90:C6:7C:0C:81:B2:DE:94:C9:E9:C8:38:08:E5:10:92:07
Certificate issuer:       /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
Certificate serial:       010D0C9F4328584AB650DD47C200219B572A3F80
Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/04483737-3da9-360f-9056-a84ebc6d1762.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        163.123.172.0/24 maxlen: 24
                          163.123.173.0/24 maxlen: 24
                          163.123.174.0/24 maxlen: 24
                          163.123.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:dd:47:c2:00:21:9b:57:2a:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=a2b729c7-ea84-4233-9a43-a4d888b7934d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:4f:be:88:37:4e:01:e3:29:97:4c:9b:81:
                    a7:78:e0:46:6d:21:e8:67:ff:e1:1b:57:32:c6:05:
                    2d:91:61:f2:ea:aa:2a:0c:65:14:1f:8c:43:10:18:
                    fa:bc:ed:27:08:c8:35:dd:c3:37:0f:79:f8:fc:4c:
                    d3:d8:0e:9b:88:c1:54:36:27:13:d4:2d:15:e2:5b:
                    e2:8b:8c:21:6f:f9:19:83:e7:f4:f7:d5:3a:f8:c0:
                    4a:b9:ff:01:5e:dd:6d:e0:40:0c:ab:37:9b:2a:31:
                    22:07:42:b4:76:93:17:b0:75:6f:0e:00:0c:02:15:
                    a5:03:6e:e1:5d:e8:9f:00:67:1e:41:a5:cb:78:73:
                    1d:cf:b1:0e:f4:17:9c:f8:eb:e0:77:15:6f:79:14:
                    af:96:7f:d5:3b:9f:dc:73:b6:bd:e0:6a:9d:a3:99:
                    9d:62:1c:b3:3d:8e:73:bc:c6:86:1f:4e:a9:ad:84:
                    fb:2d:8d:d9:52:4f:80:77:8a:9a:fb:f1:7c:1d:a9:
                    fc:c5:47:9a:fd:63:ba:4c:29:35:6a:99:ef:bf:0b:
                    72:09:ee:80:00:b1:23:df:e0:6a:f6:78:f8:38:93:
                    72:ab:d0:10:c2:97:8d:0e:45:03:4d:54:d3:e5:51:
                    90:a0:fd:51:d8:d0:d4:63:f7:01:57:33:7a:63:1b:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:23:90:C6:7C:0C:81:B2:DE:94:C9:E9:C8:38:08:E5:10:92:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/04483737-3da9-360f-9056-a84ebc6d1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:b1:aa:f4:09:d0:93:21:4d:60:a1:07:f0:be:43:4a:66:
         ec:75:92:ba:af:a7:db:6f:53:0b:a7:ec:0e:26:96:b6:cb:ba:
         62:e8:58:89:50:72:4f:cb:8e:c7:82:c9:48:2e:13:ca:83:db:
         74:3c:21:38:5f:2f:d3:5f:dc:b0:e4:62:f9:04:02:0f:19:1c:
         75:57:2b:a0:db:20:69:73:ef:95:43:75:6a:7a:e7:9a:6d:df:
         94:fd:2e:13:84:2f:3c:e8:6c:60:2f:bd:bd:11:4f:e8:1a:1d:
         d3:03:1b:8f:fe:b9:db:27:98:c1:ed:de:bb:6d:77:bc:3c:21:
         9b:f3:f7:a9:c6:d0:78:33:e6:6c:9d:66:9a:94:b9:54:f7:b9:
         60:07:ff:bb:d0:0e:08:f4:dd:4c:04:cb:20:8e:10:90:e6:b9:
         bd:1a:54:95:46:c6:56:7d:9f:67:0b:a2:a7:7f:cf:21:18:b3:
         69:31:fe:83:dd:79:1f:8d:88:fa:77:92:a0:dd:3a:85:f2:bf:
         ba:cb:18:21:dc:4a:39:c4:cc:0c:25:7e:17:fb:a8:c2:52:50:
         05:60:42:f7:94:0f:1d:3c:52:70:5e:da:24:b9:71:61:90:51:
         99:3e:ae:5b:dd:b6:10:88:86:e7:03:29:08:5d:4f:4b:dc:2c:
         6c:bb:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:20 2025 by rpki-client