Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
File:                     09e21013-7b4b-34c1-82cf-d3a46658b996.roa (raw, json)
Hash identifier:          M+e7vfLqrwyr7USoOK74CRaqhAT3Usf52E6c2ZaEG2c=
Subject key identifier:   51:B4:0D:93:02:AD:78:6D:8A:8E:4A:2D:2D:18:A6:58:61:58:57:B9
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584AB91BB505D243F908FCB4B900
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        143.223.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b5:05:d2:43:f9:08:fc:b4:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=6c7a7560-e9d7-4e34-891d-926521e7b1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:a2:e8:64:10:b4:f5:0b:eb:45:00:17:6a:
                    ed:95:6f:96:9e:84:b6:93:ab:da:71:d5:cd:ac:2b:
                    57:ec:e7:15:27:d0:7e:f6:3c:97:a2:c9:c6:5b:47:
                    34:de:9a:f3:2b:6a:9b:8f:4a:25:77:89:8c:dc:91:
                    09:20:08:e8:bc:e8:8d:b9:a8:ae:5f:38:07:36:10:
                    a0:66:da:35:79:68:62:27:f7:a8:40:e4:02:f9:2e:
                    cb:36:48:9b:2d:3a:33:7e:22:2b:e8:f8:2c:33:e4:
                    68:7b:e2:bf:38:69:f2:a1:dd:f1:23:5f:8c:ff:5f:
                    80:66:68:dc:9e:28:9a:53:b0:a1:11:8a:e3:4f:65:
                    d0:21:0c:5a:ea:e3:08:fd:5a:e1:6d:b6:57:c4:76:
                    7d:9e:73:b1:39:07:be:37:77:89:00:08:0f:f8:7b:
                    69:a8:57:97:a4:75:a4:a4:3d:fb:68:50:f4:fc:76:
                    98:83:71:e0:d8:aa:46:8f:84:2a:2e:3f:be:7d:73:
                    f6:d8:88:c7:bf:46:1a:bd:4a:4e:12:42:e4:8e:aa:
                    f7:1c:83:c6:b3:49:cf:7a:e7:87:b5:28:2f:f4:1a:
                    60:c9:26:41:1a:a3:53:67:d8:c0:ec:65:66:06:97:
                    31:51:7f:dc:d8:7d:75:23:3f:ae:d2:0c:6b:08:6b:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:0D:93:02:AD:78:6D:8A:8E:4A:2D:2D:18:A6:58:61:58:57:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:3e:72:41:10:f3:cc:61:37:47:a2:e8:7b:7b:e0:2f:c8:
         48:15:7a:af:0b:50:b0:06:8d:e1:99:56:ba:ab:97:2a:f8:08:
         dc:fd:bd:38:fe:9e:b7:7f:1a:45:4c:a5:c3:ce:23:28:2d:52:
         32:34:b8:15:78:f2:37:ea:b7:52:c0:0e:80:93:69:7b:35:cf:
         74:f7:8c:c1:a0:ff:2e:9f:dc:fb:88:0b:2e:de:a4:86:11:c1:
         79:e6:18:42:db:92:a7:01:b5:be:19:ab:0f:57:2c:65:46:37:
         3b:b3:79:4f:4e:c1:be:58:d5:19:e0:e1:0c:ae:62:56:67:20:
         1f:dd:91:ee:a6:36:b7:27:35:38:2f:7e:0c:7b:b7:9a:a1:99:
         3b:b4:bd:74:5c:59:bb:83:28:40:1d:6f:9b:77:13:59:0c:bd:
         f2:69:bc:15:1b:c6:8c:0e:68:f3:3c:78:03:43:7f:a8:8b:36:
         fb:cf:c4:03:9f:58:b4:7f:dd:5c:6b:4e:e8:c5:12:6f:e6:34:
         01:9d:ca:f4:4b:27:d8:cb:50:27:63:0c:ad:de:04:84:ef:54:
         45:f3:97:7e:5a:9b:f9:8c:b0:eb:09:5f:a5:9b:27:2e:d8:5b:
         2d:62:aa:76:a6:d7:af:36:bc:ac:a3:f0:49:ca:9a:c5:81:b4:
         fb:a8:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:40:39 2025 by rpki-client