Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
File:                     e408070a-3d28-36e7-95b9-81f2a086b77c.roa (raw, json)
Hash identifier:          g934F84DOy3mUmV+wuuvJKc8vRnb5nyPJwZQehnpsfs=
Subject key identifier:   25:12:D9:B1:7E:1A:20:58:9C:98:83:F4:04:FE:92:33:E0:AF:24:39
Certificate issuer:       /CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
Certificate serial:       010D0C9F4328584ABD4B755515A9A43BFEF1E348
Authority key identifier: 74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     399248
IP address blocks:        198.207.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:75:55:15:a9:a4:3b:fe:f1:e3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=a54b3016-3be5-4758-b2e6-d97fa4e094ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e4:99:86:69:c3:e4:cd:be:94:72:02:52:d4:
                    41:04:d3:73:1c:bc:0b:61:cf:46:5d:ca:04:ca:95:
                    98:6b:34:ac:2c:c3:74:9a:48:04:29:a4:64:5f:8b:
                    d9:13:3e:54:23:3e:31:fb:d1:89:48:15:49:48:7b:
                    d1:c4:13:67:0d:1f:3b:a9:72:22:47:a9:b9:25:fa:
                    d3:5c:04:33:56:b7:f0:0e:a1:ab:2b:ba:44:b7:ab:
                    b2:50:d2:93:aa:26:f7:9a:65:a3:fc:65:5d:5f:8c:
                    46:e5:45:8f:bb:9d:b3:79:2c:ae:f3:85:1e:88:4e:
                    90:d9:18:65:92:a1:af:5f:08:74:d0:91:16:16:60:
                    0c:4b:9d:b8:a5:9f:65:09:72:7f:80:31:69:d1:11:
                    53:22:73:2e:62:45:62:d8:3e:80:5e:64:42:c7:52:
                    ff:25:82:85:dc:a1:6d:82:06:dd:3a:a0:24:ff:9b:
                    49:5d:4f:da:f7:d2:cb:21:db:ec:52:19:44:59:b7:
                    25:f1:65:06:e9:30:38:97:b1:b0:dd:1c:58:03:e0:
                    c5:23:61:d1:f9:ee:77:00:89:a1:5a:d3:fe:96:82:
                    38:f1:92:eb:25:4b:cf:42:29:27:54:53:8f:dc:aa:
                    1c:2a:80:69:50:71:24:b0:8e:35:e4:8f:e6:2c:cb:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:D9:B1:7E:1A:20:58:9C:98:83:F4:04:FE:92:33:E0:AF:24:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:06:3b:12:21:b3:b8:e5:95:a7:95:24:7a:90:4a:9a:4d:
         8a:26:63:2f:cf:4b:23:4e:15:25:63:d0:5e:eb:0b:ad:0e:c3:
         54:2b:1b:53:9a:5a:54:42:b9:42:e0:d5:e3:d8:9f:3f:ba:f5:
         6d:d6:75:02:9e:f0:14:8e:88:2f:e4:5b:c2:66:1c:d7:35:09:
         ed:de:7b:a0:55:b4:5d:f7:69:9c:ad:b0:f4:ff:d0:2a:13:c3:
         93:0c:b6:ff:c6:bb:dc:30:ed:8d:c2:02:9e:ae:c0:c5:8c:1a:
         96:18:c2:16:d4:69:15:61:10:ca:7f:37:17:9b:1c:2c:c4:99:
         17:52:15:6f:14:a5:c2:59:03:bc:a8:15:9c:49:28:2b:d0:e3:
         b3:ff:10:8b:b5:41:08:1e:1c:6f:27:5c:93:86:51:cb:f9:3e:
         ac:2d:ff:0e:4e:67:e2:86:7e:f4:f7:13:f8:70:08:94:47:a2:
         0b:76:42:e0:67:a1:38:98:8a:bb:1f:d2:52:2e:35:a7:47:d4:
         29:65:62:10:93:ee:25:cf:a9:69:53:dc:80:c8:da:5b:60:89:
         49:d4:1c:fa:45:16:a0:97:4b:3f:d0:c1:87:92:4b:f8:67:bd:
         76:84:31:2b:4c:af:1b:36:13:7b:84:ae:0c:1a:93:07:27:f5:
         67:29:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:53 2025 by rpki-client