Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f99229f5-f9b2-3ea4-ad23-038875374eef.roa
File:                     f99229f5-f9b2-3ea4-ad23-038875374eef.roa (raw, json)
Hash identifier:          u4Hx4bF0zdwlJE99Y+SNtUZ7BKFERsBnDfLJbbKjQtM=
Subject key identifier:   1D:D2:7A:F9:D7:D2:13:42:3D:A1:71:EF:A9:23:CE:BF:45:EF:3E:EE
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584AA56C0701DA19A8253C839000
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f99229f5-f9b2-3ea4-ad23-038875374eef.roa
Signing time:             Sat 26 Jul 2025 11:46:48 +0000
ROA not before:           Sat 26 Jul 2025 11:46:48 +0000
ROA not after:            Fri 24 Oct 2025 11:46:48 +0000
asID:                     834
IP address blocks:        209.178.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:6c:07:01:da:19:a8:25:3c:83:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 26 11:46:48 2025 GMT
            Not After : Oct 24 11:46:48 2025 GMT
        Subject: CN=d8f66273-9c22-47cb-9070-eaf496cb1cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:d7:ae:04:4d:0e:73:ed:8e:c3:1d:6b:31:
                    8a:23:62:61:6e:6a:df:e2:99:e5:8a:15:1b:f1:d0:
                    81:3e:d9:d4:72:83:c5:9b:50:c3:d4:20:0b:47:3b:
                    a4:8b:ad:9f:20:71:54:9b:f8:f0:8c:cd:0b:10:ce:
                    d5:eb:1d:88:07:7f:a2:95:80:04:05:7b:b1:75:29:
                    1e:42:7d:88:0f:4e:cf:5a:c8:4c:cd:2c:2d:41:d9:
                    e7:9e:be:35:16:63:28:15:fc:47:a0:c7:ea:b8:fc:
                    33:d4:75:f7:4d:2b:a1:94:86:58:48:88:da:98:85:
                    d5:c7:86:52:c4:de:40:bc:58:0a:6d:cc:84:bc:ad:
                    b9:25:7e:0a:67:04:97:6b:bc:ee:65:f1:08:ee:39:
                    6c:b7:7c:8f:c5:90:0f:fd:fd:03:ec:31:0b:b6:9b:
                    c3:8b:62:10:f9:ea:6d:cc:e9:6e:6a:47:ef:89:5e:
                    28:76:76:0d:67:3c:e9:96:11:e6:9d:d8:df:2b:64:
                    1b:7a:ee:22:5e:58:b2:93:07:5d:c5:b4:d4:7c:32:
                    23:14:c3:2b:42:06:33:c2:f1:f0:1d:2d:ca:e7:f5:
                    9c:59:0f:f9:cf:9a:85:95:cb:bc:82:ae:e4:70:49:
                    91:c5:15:e3:8c:e1:58:3e:3b:3b:8a:34:45:94:21:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:7A:F9:D7:D2:13:42:3D:A1:71:EF:A9:23:CE:BF:45:EF:3E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f99229f5-f9b2-3ea4-ad23-038875374eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:57:b9:e0:e4:ba:f9:3a:6a:c9:4e:73:7d:2f:f5:22:b5:87:
         f6:e5:12:99:e2:e8:74:97:05:dd:0e:f5:ab:3b:41:55:33:b1:
         f2:98:05:50:e1:a4:37:6c:f5:2f:7f:66:b6:b5:dc:e9:38:f2:
         09:00:c1:ad:a3:ba:9f:c4:de:5f:c1:6d:25:65:17:16:d0:f1:
         8f:4c:70:64:84:f9:ef:9b:74:85:e9:d1:dc:b0:bf:5c:9d:4a:
         91:f3:17:6b:63:72:1c:a3:58:03:79:22:e4:0d:f9:cf:99:b8:
         d5:9d:62:f7:3c:d9:03:25:4b:59:9e:1a:c3:cd:d7:69:8d:ee:
         ef:25:e5:40:7b:5d:0f:0a:8d:15:e9:55:88:a9:65:68:70:d7:
         3d:cf:bc:92:c8:62:f6:26:24:19:84:f0:05:8f:0e:d2:ea:74:
         bf:75:d0:7c:86:8d:88:c3:d1:2f:40:5a:c0:d3:89:7f:e5:fd:
         f1:c1:52:79:4d:ac:f2:77:90:c1:b4:3c:99:06:15:b0:e4:c3:
         3d:69:ba:35:64:39:bf:1d:a2:a5:2e:c4:27:4d:b0:b7:b4:5b:
         88:f3:fb:0b:c2:0b:95:e6:6c:95:34:61:dd:c8:4e:33:b8:7d:
         d1:b0:9c:2f:cf:8e:31:4a:31:79:f0:a9:6b:ae:80:1f:cc:dc:
         32:92:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:46 2025 by rpki-client