Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4eb4d219-1935-3d8c-9782-e188128a406f.roa
File:                     4eb4d219-1935-3d8c-9782-e188128a406f.roa (raw, json)
Hash identifier:          P+8Y3DkjQwRuxrynX/ptJTDoBwXlcJrolG2dOH9Gt/4=
Subject key identifier:   4E:07:75:31:90:8B:05:CA:7A:0E:10:99:48:3F:3C:9F:51:64:D3:AB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A814625F57095F8DCCBF819C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4eb4d219-1935-3d8c-9782-e188128a406f.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     62904
IP address blocks:        173.232.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:25:f5:70:95:f8:dc:cb:f8:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=beaf45c5-f2e6-4abc-971e-045c38d00307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:3d:2a:ff:19:04:2b:c8:30:bf:3b:20:17:
                    c0:16:e3:a1:11:2e:b4:89:bd:11:71:08:ce:82:a5:
                    07:96:e5:0f:68:ee:c2:d9:09:ac:32:99:0c:d3:49:
                    aa:e0:a7:01:b8:82:c7:b9:5f:96:9a:c0:5b:bd:13:
                    fc:80:fb:b7:5c:e3:41:51:df:ab:f7:d3:d3:7b:26:
                    6d:6d:b8:43:f2:5a:ec:2d:6c:3c:92:69:31:82:28:
                    c5:6f:02:c4:09:ad:0b:53:0e:5b:ad:20:3b:4a:3b:
                    d8:9e:4c:72:f8:37:26:93:67:9a:81:15:62:44:2b:
                    f5:2c:76:e2:2c:99:4d:39:c8:8c:34:f1:ba:72:3d:
                    08:88:2f:57:ac:92:b0:94:a1:15:b9:50:e4:06:a6:
                    0e:07:a8:db:d0:1a:b9:76:82:32:c4:90:b2:a8:30:
                    62:1d:7f:37:4a:56:01:3f:60:4c:07:26:c5:3d:b8:
                    d9:bc:47:84:ed:70:bf:5c:0a:0e:43:53:46:85:42:
                    4a:86:9a:0d:25:75:62:fa:c9:a6:f2:84:6a:c8:77:
                    01:81:c2:b1:ab:a3:1c:af:8c:37:0d:a2:d2:db:1c:
                    22:ee:49:95:df:c7:7c:f4:86:cb:cd:aa:4a:56:82:
                    14:0e:6c:a2:0d:9a:49:e0:ec:f4:2d:ba:55:25:04:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:75:31:90:8B:05:CA:7A:0E:10:99:48:3F:3C:9F:51:64:D3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4eb4d219-1935-3d8c-9782-e188128a406f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:98:ba:64:b8:de:d2:3e:53:59:91:46:23:b3:56:46:a6:b5:
         30:38:d9:89:70:f4:ac:09:90:a8:a3:eb:9a:8e:2d:b8:60:ad:
         18:3c:63:7d:51:5e:2b:0e:cc:81:31:03:92:ca:b5:fa:b5:eb:
         f8:e3:87:ec:90:f0:83:52:37:bd:6a:06:e9:0b:bb:74:bd:2c:
         52:97:5d:b3:44:52:dc:00:8a:05:78:69:15:b5:a8:44:44:ca:
         97:cc:6f:53:1d:bc:f2:9a:09:16:db:66:ac:5e:a4:ff:33:79:
         c0:05:02:ba:5d:3e:08:84:27:70:0c:32:ba:16:02:77:b1:1a:
         87:d4:a8:5d:02:bc:f3:5b:ac:93:fd:0c:b2:35:d7:9b:75:d5:
         5d:d2:e3:56:ed:9f:80:84:06:cb:74:6a:b9:0e:5c:64:69:74:
         33:0c:9a:99:c8:45:12:6a:e0:94:26:8f:15:86:47:e0:d5:cf:
         1a:35:cf:bb:70:1a:98:79:c6:5f:30:b8:95:af:44:41:42:a8:
         51:b1:4d:24:20:f6:2f:7c:ef:f4:ea:67:0c:58:c8:4e:e1:d0:
         13:fd:29:73:f1:3d:cc:e7:93:b5:df:01:b3:9f:a4:f9:75:d4:
         2e:e0:77:3c:6a:d1:7a:a0:cc:8d:d9:05:36:cf:c0:6e:e0:c3:
         08:c1:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:56 2025 by rpki-client