Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa
File:                     70abb78e-0ea4-389d-addf-e58129c2bff6.roa (raw, json)
Hash identifier:          j0gB4q2bjblaOuZcmuzewW6zLia4GPLdUgC4zkQ8LTg=
Subject key identifier:   0F:FF:6A:83:C3:D1:24:6E:D4:EC:60:52:91:2B:C0:30:3D:3D:95:30
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F4328584AB4EB7F132B2892CD89395FC0
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     22504
IP address blocks:        162.118.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7f:13:2b:28:92:cd:89:39:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4d2de367-d84f-43f4-a13b-1e3a4cb90ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:82:2c:0a:59:97:d8:e8:d0:e0:a0:bb:6c:
                    d7:06:b7:ff:61:29:28:8f:fb:46:c0:69:64:25:ce:
                    56:96:ff:0b:96:da:bb:aa:42:0b:6b:80:04:53:3c:
                    7e:41:95:06:be:ae:c2:1e:c6:83:2b:24:24:74:20:
                    13:a3:c3:fe:5a:9d:9d:3a:47:57:06:e6:5a:8c:c0:
                    1e:d0:de:c9:dc:3a:f7:c2:ad:8e:7c:11:79:86:33:
                    9f:be:16:8e:4f:2e:08:b1:fc:19:48:0c:3a:36:30:
                    aa:4e:62:d0:ea:08:d7:e9:c6:74:a0:e6:6a:65:3b:
                    93:d8:65:e9:e8:29:b5:0f:f0:5b:c8:77:25:78:85:
                    15:1f:d8:63:f1:a8:79:30:e5:ac:e6:00:8c:07:56:
                    ca:ab:0f:aa:02:f3:0a:3f:3c:15:2c:dc:a9:29:b4:
                    04:29:e8:ce:25:79:16:bc:46:6c:13:45:e8:d7:14:
                    b8:68:cb:85:5b:f2:bb:b5:80:6c:22:43:af:50:8d:
                    b1:79:89:08:68:8e:d2:d8:e1:65:11:aa:c5:e8:a7:
                    30:9b:66:c6:61:19:bc:b0:59:8b:30:e4:f0:17:0a:
                    9f:20:dc:ff:be:43:ca:c5:43:33:7f:3a:0d:48:b9:
                    e6:3b:d0:d7:b5:63:58:d2:51:8f:bc:15:7b:ad:fe:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FF:6A:83:C3:D1:24:6E:D4:EC:60:52:91:2B:C0:30:3D:3D:95:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:6b:45:f5:d4:1c:db:8d:77:9e:4b:83:e0:8b:02:0d:09:
         4d:a6:9e:b0:f2:0a:6b:68:68:6a:9c:91:b1:29:d6:d3:1d:91:
         dc:ac:5e:1a:1e:75:c3:5f:93:d9:5b:85:15:36:06:ea:c0:b9:
         94:9a:0e:94:49:bf:47:4f:e3:36:f4:e4:6b:5f:da:99:b4:ee:
         2d:03:35:7b:56:8b:34:13:6d:f4:30:95:a1:40:30:14:2e:14:
         0d:ab:0e:98:3f:71:99:ea:81:6d:38:27:3e:84:81:5c:42:fc:
         a4:64:6d:4f:1f:d0:d3:38:86:96:b5:e8:8b:a8:4c:68:e3:34:
         cb:fa:f8:50:a1:f6:9f:68:c7:bb:47:69:bb:d5:ad:78:46:82:
         d0:73:c9:84:39:ce:1a:d2:b3:6d:9c:54:a6:2d:95:84:e3:56:
         99:83:d9:ee:ff:67:ef:3e:25:d4:cb:a0:86:aa:b1:e6:34:bc:
         be:d6:f4:36:60:20:a4:b8:91:06:c2:29:4e:21:08:7f:25:af:
         d3:ab:c1:77:df:c9:16:ab:f5:22:e1:17:3a:fd:f2:52:a7:a7:
         0d:1b:6b:63:34:40:b0:4c:e0:69:e1:e9:c6:d6:a7:9a:da:a5:
         33:66:2a:c4:b3:a1:8e:a8:99:52:39:75:92:36:a6:8a:55:79:
         10:ad:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:24 2025 by rpki-client