Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa
File:                     0d5c86c2-6106-3417-af37-0063e2ac2681.roa (raw, json)
Hash identifier:          ka+qCYd0l868eoe4dBPLWmjG8l/eqqmfh8cmT3qvVqg=
Subject key identifier:   14:45:36:F1:60:AE:C6:31:8A:74:42:6D:55:0D:57:3C:61:50:02:36
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584AB91BA5C02F682918761D7F00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     23280
IP address blocks:        143.223.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a5:c0:2f:68:29:18:76:1d:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d16fc1c3-3946-403d-b5f7-78adfb408cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:17:93:1d:31:17:d2:b5:ef:4f:ad:7a:12:
                    26:59:09:b6:51:4d:d1:be:97:4a:9d:e4:83:8f:7c:
                    7e:bb:ca:7a:a5:a6:68:22:79:33:48:72:20:b9:81:
                    0a:51:45:d2:50:3b:ef:49:0e:7f:fc:59:60:ab:b4:
                    66:44:7e:b7:84:a7:19:fa:90:b9:61:9b:41:4f:91:
                    88:f1:a0:d1:4d:6f:89:e2:9b:14:36:31:7e:b2:13:
                    16:e6:e3:de:c3:b8:c3:08:24:f2:0a:11:c4:68:31:
                    8d:49:9f:2b:9c:f8:7a:a8:a7:28:df:95:1a:00:cc:
                    0b:cc:69:e6:ef:d8:9f:95:db:9c:d4:72:44:84:89:
                    5e:ce:da:e8:5b:72:52:02:f5:bb:d4:47:47:20:9c:
                    c2:17:bb:7c:f9:04:7d:f5:83:91:0b:df:cf:e1:6d:
                    79:d6:e7:2b:18:15:b7:44:4c:2c:3d:ba:7c:f2:92:
                    33:28:13:71:ec:54:58:a6:cb:79:da:e6:4d:2f:c2:
                    f6:3e:07:12:47:3b:f5:57:16:f2:8d:74:9a:df:36:
                    bb:94:f0:80:16:84:cc:a7:b3:ba:3f:20:ea:a4:35:
                    8c:94:7a:9e:50:ce:27:95:b4:79:e5:39:ee:56:b6:
                    ec:ec:1e:91:06:ee:dd:6b:e4:1d:3c:07:43:91:1d:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:45:36:F1:60:AE:C6:31:8A:74:42:6D:55:0D:57:3C:61:50:02:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:b2:f9:52:df:d3:7a:88:05:c9:10:96:d2:95:d7:d0:37:
         eb:40:6f:bd:80:73:3a:38:1f:67:49:2c:80:5b:c8:81:20:da:
         48:e3:d9:48:17:0e:8f:d8:fd:14:d5:cf:64:d9:2b:a0:67:2d:
         d0:32:e2:4d:70:d1:a3:32:7a:1e:07:30:5f:c2:d8:a3:02:2a:
         47:35:b9:85:bc:18:40:bf:a8:fb:3b:ef:0d:b1:ff:cb:9d:cd:
         b3:ea:1e:e8:83:83:28:12:46:ff:a5:99:2b:1f:73:10:15:8f:
         b6:a0:3f:20:40:79:7b:5e:33:77:11:d8:98:df:45:15:16:f8:
         68:5e:3b:e0:70:75:97:53:21:77:96:87:21:2f:97:27:0d:cf:
         0a:ec:4e:c3:72:6f:d4:1c:17:be:6b:f1:fc:b6:ee:84:9c:81:
         64:68:6b:4b:38:51:88:da:58:74:8a:d7:bf:ff:b0:50:d2:dd:
         87:92:87:3c:4c:0f:4d:7f:7f:42:7a:0c:59:5b:10:dd:29:06:
         53:9c:7a:c5:1a:10:ca:9f:96:74:8b:cf:34:43:40:f6:57:2e:
         1b:86:2c:9b:0c:39:4e:1c:7b:6c:89:7a:ff:a3:df:c1:70:52:
         3f:51:50:f3:c3:3c:65:34:57:0e:6d:cd:db:79:3a:5f:e4:22:
         da:26:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:55 2025 by rpki-client