Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa
File:                     76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa (raw, json)
Hash identifier:          73S59BlpAHT2m1feoLbnbMX8lsulxDujCxgw4Uy/l8s=
Subject key identifier:   BD:EE:C0:FB:84:DD:E2:A2:DD:BB:E8:01:F5:F1:02:FF:27:14:47:37
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584A655B30392D6AE87859E28780
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     26831
IP address blocks:        209.124.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:30:39:2d:6a:e8:78:59:e2:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=0d285254-3e07-42b9-a19a-8b47eac304df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:06:e2:90:d0:07:2a:56:f6:9f:0c:6d:4d:
                    0d:7b:6a:1e:d6:38:36:63:4f:0e:4a:49:01:5b:5b:
                    a4:3c:43:72:7e:e9:20:bf:d0:34:11:50:0e:f7:a6:
                    83:78:c9:56:12:06:0a:ec:fa:89:3d:0e:bd:ef:17:
                    38:bb:90:04:bc:1b:00:52:aa:4c:0e:a0:75:38:02:
                    a9:8c:d4:da:24:b0:9f:26:e9:df:73:3d:d4:11:5e:
                    fe:ac:64:c4:3a:5c:f8:50:25:52:9e:b5:c1:24:f0:
                    87:9d:15:83:f6:42:31:4a:f1:fb:74:ef:c0:67:20:
                    ff:1d:c1:86:da:0d:68:92:53:83:06:37:23:dc:1e:
                    ac:aa:36:49:20:81:02:1f:a1:74:2f:61:02:57:53:
                    e4:2c:30:ee:88:e8:8e:d9:bc:7d:f8:c3:9f:a5:71:
                    39:83:ec:03:4f:c6:a2:b0:67:bc:d3:9c:0b:28:f2:
                    16:92:98:da:56:f9:ae:48:bd:26:bf:42:0d:8e:f6:
                    6a:a9:59:cb:cc:1e:8f:59:af:8c:1b:ce:19:5f:d6:
                    a1:ac:b3:71:c9:e0:88:e6:33:37:6c:b7:29:3d:71:
                    50:bf:e8:c0:06:9e:74:a9:96:c5:c0:9d:2e:e8:be:
                    f1:f5:76:a0:ed:9d:43:37:e7:2e:d6:e0:63:32:64:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:C0:FB:84:DD:E2:A2:DD:BB:E8:01:F5:F1:02:FF:27:14:47:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:78:55:22:e0:c3:75:2d:c5:68:08:d6:09:5b:b9:d1:48:
         52:35:fb:20:2e:3c:83:e3:7a:89:4c:9d:3b:b1:8e:19:05:4f:
         d7:e0:07:94:1f:25:dc:b0:21:24:d8:4a:d2:89:86:12:de:f4:
         38:d7:1c:ad:a4:d6:c5:e7:3b:ee:b0:8c:67:fd:9d:13:81:19:
         1c:7f:3d:f4:8e:b5:4a:b0:ee:29:5f:d0:65:96:2d:cf:06:1d:
         04:fb:b3:2a:60:bb:a8:f3:24:d4:e2:f0:80:ed:d3:f7:92:d3:
         54:28:4a:c8:a9:9d:b3:73:b0:ad:cc:d0:5f:ff:79:52:98:19:
         13:6f:66:b3:9c:ec:38:0d:f7:26:97:57:cc:7b:3c:6e:f0:97:
         86:4b:5e:77:8c:94:fc:dc:cb:57:25:3c:0c:63:58:07:d1:e3:
         86:f8:af:27:2b:11:6a:55:b7:b7:85:b4:6f:a7:ed:df:c2:29:
         c4:bf:2c:6a:15:4a:e6:90:03:0b:8f:97:85:c1:5e:5c:cc:6b:
         2e:bb:d0:cc:b9:30:b9:8c:cd:51:1f:22:cf:76:98:09:4d:dd:
         f5:9e:72:69:33:6b:a6:ef:9a:f1:a5:ce:ea:7a:48:57:e8:15:
         d1:dd:37:f0:c5:e3:bb:83:c0:4f:1c:c4:74:56:2a:8c:6c:5d:
         db:42:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:12 2025 by rpki-client