Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3e3786ff-db27-3657-92d6-07f0d31a4b86.roa
File:                     3e3786ff-db27-3657-92d6-07f0d31a4b86.roa (raw, json)
Hash identifier:          6dnUNlqARISr2EO0PsRS/BHbepyckGHFuDJgj8Lw834=
Subject key identifier:   45:5B:AD:E0:3E:D8:B0:53:7D:9F:F8:12:33:7B:87:2C:F9:4D:D4:CC
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584AB4EF05359ED24DCE1C548180
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3e3786ff-db27-3657-92d6-07f0d31a4b86.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     14618
IP address blocks:        131.229.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:05:35:9e:d2:4d:ce:1c:54:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=06c4e133-8d0f-463e-be30-e354a3659e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:83:6a:2b:22:25:d1:b1:e8:74:ef:46:1c:
                    45:56:46:4f:f2:6d:8e:09:92:09:19:7f:a7:f3:1a:
                    57:31:62:ea:36:e0:31:f6:2b:2e:64:37:84:dd:74:
                    55:d5:a7:9d:56:ca:51:47:98:0e:93:0f:ca:9b:47:
                    5b:c9:7c:7e:5c:22:06:cb:3f:fa:e2:07:87:6f:a7:
                    09:01:4e:2b:2f:81:ef:d2:76:df:7f:83:41:46:da:
                    d0:5a:aa:68:7e:29:a1:46:da:5c:b0:fc:db:37:7e:
                    ad:2f:ee:05:1b:fc:cd:09:10:f0:84:12:61:48:54:
                    3d:b0:a7:e7:c7:a9:aa:46:98:0a:a2:94:2e:6b:af:
                    a0:9f:27:82:02:bb:ab:60:8d:a8:15:0f:15:6a:1c:
                    da:41:7f:70:01:1d:45:86:3e:6c:e7:b8:11:e3:83:
                    e9:99:04:5a:f1:02:01:a7:96:75:73:30:48:0f:0c:
                    6f:d5:ce:c9:13:4b:82:88:39:4e:ee:59:f8:cf:41:
                    21:d2:8f:3a:96:27:2a:f1:99:4f:fc:5e:d5:a8:89:
                    31:ca:32:cf:3b:2e:9e:47:5f:9a:3b:fb:3e:bf:df:
                    e9:13:9d:a8:a4:d7:88:82:f3:36:a5:d2:68:c2:00:
                    a3:e8:8f:c4:38:32:41:bc:24:25:a1:17:8a:93:ff:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5B:AD:E0:3E:D8:B0:53:7D:9F:F8:12:33:7B:87:2C:F9:4D:D4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3e3786ff-db27-3657-92d6-07f0d31a4b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:96:41:ac:bf:e0:74:bc:54:bd:a0:75:dc:35:e8:6f:04:dc:
         11:bc:13:f2:5c:8b:e0:bd:ad:af:33:80:51:3d:c9:7c:e0:6c:
         e5:4b:7c:af:10:b0:50:6d:f0:fd:5b:14:09:e6:f1:3b:c3:32:
         80:77:36:5e:be:57:3c:73:d3:c1:e9:5b:99:4c:63:ad:9c:92:
         07:c3:f0:32:c9:17:20:23:30:d5:cc:44:42:35:77:6d:6e:08:
         23:83:4b:5f:92:cb:b6:1f:3e:9b:71:1c:9a:c3:7b:0b:2a:7f:
         b2:c0:32:1b:da:9a:4a:0e:99:15:78:7f:73:f9:cc:c5:03:98:
         6b:17:46:3a:b1:9f:28:3f:f0:ae:b7:ef:c1:d2:39:ac:fd:09:
         8c:a5:0c:da:97:36:be:3a:1f:20:c3:19:38:76:ab:79:fe:e3:
         a6:49:df:93:61:09:14:0c:92:d1:62:c7:88:d7:66:b6:e1:95:
         ad:c8:30:bb:25:de:12:1e:69:02:20:0c:cf:90:92:24:ac:14:
         2f:56:a0:16:b2:ef:27:c0:f0:d7:1e:56:12:cf:07:0b:a3:e1:
         c2:87:4a:af:0a:a3:2e:30:3d:b4:b9:d2:06:c7:fd:18:9c:fc:
         03:e6:dd:9f:8b:ed:e8:c7:a2:07:df:5f:b7:e3:97:60:a7:c6:
         73:b3:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:39 2025 by rpki-client