Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/765a21fb-b2dd-3039-9cc5-6d977ec67539.roa
File:                     765a21fb-b2dd-3039-9cc5-6d977ec67539.roa (raw, json)
Hash identifier:          BVRM8ngo3oY+zdJV5LEwgjN1hnOJ9MX+fqrl8idAJgg=
Subject key identifier:   F4:C6:36:55:16:90:E3:E9:3E:43:68:85:EF:33:64:76:15:A8:B1:2D
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584A9A66360CCBEB05E84C1E6480
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/765a21fb-b2dd-3039-9cc5-6d977ec67539.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     63264
IP address blocks:        142.214.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:36:0c:cb:eb:05:e8:4c:1e:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=19d51d03-29cd-4a81-91da-9eb2d56339a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:c8:2d:9c:49:1d:21:5f:31:8e:02:7c:83:
                    1c:d2:f5:40:2a:a1:af:09:03:07:23:d5:74:7a:89:
                    c9:ed:a3:dc:d6:28:6b:c8:45:c6:f7:e6:3d:1e:af:
                    ea:bf:95:d7:3e:94:3f:20:52:ac:11:0a:69:7f:34:
                    b5:99:21:a5:a5:a0:f3:42:ac:03:f1:df:86:e8:0e:
                    53:2b:09:ca:f0:2c:a6:53:2b:0c:ed:18:3c:3b:08:
                    f1:b2:3c:64:d1:90:69:10:f8:20:80:82:e2:ab:ef:
                    c1:6d:39:e1:32:90:74:fc:6a:b8:3f:df:d9:61:8b:
                    5c:a1:0e:e0:2c:68:bd:57:da:c4:e5:63:aa:47:ba:
                    bb:d7:bf:f7:25:79:9a:54:22:1f:e9:35:f1:9b:5b:
                    99:71:ae:dd:6f:1e:1e:b6:59:ea:21:2a:c5:50:2c:
                    48:d5:b2:d6:6d:7a:73:ec:38:6d:b9:ab:19:7d:90:
                    69:25:d9:d3:46:4b:4b:50:c8:f8:b8:c8:3b:83:b6:
                    2e:28:11:ee:72:ef:99:fb:5c:31:9c:f9:b0:94:44:
                    05:39:b9:77:a3:55:2b:60:ba:71:15:70:4b:1f:14:
                    27:b6:69:90:24:8a:c7:2b:52:e4:e0:06:0a:0d:60:
                    c3:00:c1:fd:42:0a:f8:bd:d9:f5:86:7b:fb:9b:71:
                    36:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:36:55:16:90:E3:E9:3E:43:68:85:EF:33:64:76:15:A8:B1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/765a21fb-b2dd-3039-9cc5-6d977ec67539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:5d:e3:f0:04:b7:f5:4a:79:36:1a:7e:53:d4:78:81:21:
         50:f1:b9:27:64:6f:07:03:c4:bd:17:53:4b:00:b6:eb:38:ce:
         32:1c:f4:74:05:fb:fa:d4:af:64:7e:dc:88:b5:ec:bd:95:90:
         90:22:9c:6d:42:03:06:df:8a:e5:38:06:25:be:fc:2d:b7:e4:
         70:c4:c5:0f:39:20:10:5d:03:a2:28:93:16:fb:07:6d:ef:52:
         23:96:e0:ab:a5:75:f8:b4:42:28:0a:97:70:d3:90:dd:d2:cf:
         ab:cf:9c:81:7b:09:56:5b:b7:06:e2:ef:1f:66:23:10:69:73:
         db:41:ae:5f:18:e7:60:0d:a1:6e:44:a8:ec:16:72:67:b7:fa:
         71:31:d6:d7:7a:ca:94:ab:0e:9d:a1:90:5d:f2:57:3e:93:d3:
         34:38:71:50:df:67:f4:0d:ef:27:f4:df:9f:8e:0f:c5:28:d6:
         fb:91:b0:ec:86:44:53:5a:59:ee:cb:d6:d9:8a:9d:d2:14:b7:
         97:e4:82:ac:f6:f3:67:f3:2a:d1:f8:38:81:a9:7b:a6:5d:93:
         26:b1:4e:b3:54:4e:64:f9:68:3d:9e:d7:26:85:94:59:04:8d:
         0a:c7:44:93:07:4f:0f:af:58:f6:b9:f6:6c:ec:5f:75:61:45:
         5f:7a:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:11 2025 by rpki-client