Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa
File:                     f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa (raw, json)
Hash identifier:          bDgjM1/NosqKAlla1DPZMxV0h9CkIn92neVZLUkiZ/I=
Subject key identifier:   66:17:98:C3:C3:09:B4:6B:13:52:67:8A:13:C0:AE:DB:CD:D8:4D:BA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A6DBB456DEDC79754BB942300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396356
IP address blocks:        173.211.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:45:6d:ed:c7:97:54:bb:94:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=7fb411e0-0af3-4134-8837-c92da0d59c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:3e:72:ff:53:cb:5d:b7:43:a5:10:99:8d:
                    c0:c7:3a:06:dc:6e:40:96:36:75:47:51:e4:05:b8:
                    3f:44:62:4d:c4:82:e5:02:ce:79:7a:94:c4:6f:a5:
                    54:9b:98:b6:24:00:82:d6:99:be:83:a1:6d:81:55:
                    99:82:42:10:cc:0a:6f:2f:7f:8c:68:ad:60:d9:99:
                    e7:b0:9e:5b:8a:0f:27:88:8f:09:6c:8b:e8:86:8a:
                    d3:0a:f8:bf:35:57:df:da:24:f6:2b:b7:9b:3d:6d:
                    c1:f7:52:75:0c:76:7e:96:cb:7d:b9:06:d0:8a:5f:
                    b3:f8:c6:76:bd:7d:93:ee:91:28:d4:63:d1:35:50:
                    bb:9f:56:3b:68:00:ab:e9:7e:0a:23:e6:b3:46:40:
                    69:2a:bc:48:60:9f:36:08:02:56:b3:3f:2d:22:cf:
                    bf:96:0a:b1:2a:41:56:4c:c2:86:97:2e:ee:ab:e3:
                    72:6c:2b:10:fb:be:ca:a9:50:73:a2:7c:2a:cf:87:
                    e3:53:96:a5:55:17:1f:22:17:7b:5b:59:b5:71:46:
                    17:33:d7:28:d4:90:fb:5e:bd:d3:6c:a9:c5:04:8b:
                    99:09:16:e4:47:14:62:36:43:36:33:41:4c:d4:c9:
                    f7:de:1f:7c:ed:7d:45:c9:38:99:ce:b1:01:84:f7:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:98:C3:C3:09:B4:6B:13:52:67:8A:13:C0:AE:DB:CD:D8:4D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:3d:96:b7:2d:fa:6b:90:9e:a6:ea:9e:fa:9a:47:2d:da:d4:
         c9:fe:d2:11:d1:87:0a:bc:ca:ae:35:07:fc:d3:82:91:24:9e:
         a6:d5:73:ec:42:4b:dc:f6:2a:7e:37:90:b8:90:a2:e7:06:ad:
         39:c6:62:4c:fe:a1:1c:1a:b4:44:4a:bb:d0:6d:cd:f0:89:bb:
         fa:a6:14:62:55:10:c0:4e:ae:cf:51:37:94:cd:f9:2f:27:58:
         ff:17:e5:b2:65:be:f8:10:2f:49:45:f6:20:8d:1e:b5:44:99:
         73:93:f1:c8:ae:01:47:8b:1f:d8:bb:b8:00:cb:a7:bb:64:a4:
         77:d0:00:26:bb:65:0c:41:23:94:0a:7a:1b:08:6e:8f:4f:27:
         10:63:78:5f:90:3c:ec:90:13:31:b7:08:62:d6:c2:c3:1e:ed:
         2b:00:1c:ae:03:5a:22:22:78:c3:d9:8f:66:f6:63:f6:f1:ce:
         12:7e:07:3d:0e:f7:a4:29:f4:b7:7e:3f:b6:7a:ac:e8:52:f5:
         58:8b:7d:ee:e3:72:69:e3:47:0b:1a:20:f6:49:99:ed:c0:cc:
         69:f0:06:0a:6b:60:79:ef:f9:86:65:79:3d:03:1b:39:6f:48:
         26:02:98:6c:85:83:f1:f1:f1:fe:a2:65:3e:25:1f:fd:a3:02:
         88:4c:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:11 2025 by rpki-client