Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa
File:                     822853fc-bf78-34dd-9c87-72112ff8471a.roa (raw, json)
Hash identifier:          YVKXLVsfACdfMBv2RyJzR00XLjAgVUncDm+V3sv/j9k=
Subject key identifier:   4A:4B:88:9C:31:A8:8C:9B:A3:F2:EF:74:BB:6D:63:76:BE:5E:8B:57
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A7BB0B21D0F6A4F8AD5CDA780
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     32043
IP address blocks:        170.130.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b2:1d:0f:6a:4f:8a:d5:cd:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=9f1ea587-f68f-456b-9129-cf773c25b85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8f:01:a9:b4:26:0c:28:4f:21:5e:7b:7d:b4:
                    0c:4d:84:2c:fb:9c:d6:89:a5:5e:1d:cd:5f:cb:70:
                    df:8d:c1:f3:a5:7b:99:11:3b:00:06:0a:bd:e8:2b:
                    42:b5:e0:4e:25:03:e6:9e:de:75:d7:13:b4:b6:fc:
                    ab:71:17:47:d4:6b:fa:e0:8c:3b:1e:8f:8f:54:6a:
                    92:f7:ed:59:da:13:1c:52:84:0a:70:f4:8c:74:ca:
                    65:cd:89:bb:58:73:34:8f:21:0d:00:26:8c:d9:3b:
                    e1:9f:d5:1f:e2:79:ad:d9:37:f2:94:0f:64:3b:54:
                    5d:11:23:9f:64:41:66:e5:1e:e0:be:aa:29:10:31:
                    69:9b:ec:a5:7f:3b:e1:30:7f:c1:50:e8:4e:d9:8d:
                    48:73:82:e5:1f:3e:a5:6a:45:92:66:47:88:f8:a8:
                    ea:ae:84:9d:a7:64:f6:23:ad:ef:60:86:13:64:58:
                    9c:d5:0f:30:70:f7:cc:92:13:48:f4:5b:54:19:07:
                    08:71:aa:0b:41:9a:0a:6f:74:48:f6:32:2f:31:c0:
                    8d:51:a0:74:fb:50:a2:45:08:ed:6a:f5:7a:63:3e:
                    4a:ea:2d:1e:48:0c:87:b4:e5:76:8d:17:c3:93:4e:
                    c5:68:74:31:11:40:88:4c:78:24:fc:f2:b5:97:96:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:88:9C:31:A8:8C:9B:A3:F2:EF:74:BB:6D:63:76:BE:5E:8B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:82:59:8d:58:59:85:da:75:d0:88:26:85:11:77:44:88:4a:
         5f:5b:21:f7:4c:c5:08:11:52:0e:51:7e:e3:bb:8b:23:1d:f9:
         6d:ef:18:cf:4a:ca:c0:66:24:f4:fe:e0:a9:60:f8:47:4a:5e:
         21:c2:d3:cf:a7:06:18:36:ec:46:4a:a0:95:78:99:f9:9a:a6:
         f2:9b:18:29:2a:6d:19:a7:40:de:84:bc:a6:2b:6e:4c:72:32:
         03:3b:95:a4:7b:70:ce:69:22:5d:6c:e4:09:83:a2:f2:61:c5:
         cd:41:da:a5:32:cb:df:2e:80:c4:d4:b8:68:39:6a:40:8b:3d:
         86:5b:f5:48:40:a9:e3:b4:4e:92:5c:d3:26:ad:6d:bb:6b:4d:
         0c:c9:ba:20:92:24:4d:d7:8e:23:62:33:2c:07:db:e5:f4:e4:
         d1:0e:a2:b1:d2:c8:05:2a:61:01:3a:99:47:d3:9e:fe:70:b2:
         79:c4:82:99:2e:1a:db:9d:b1:07:5b:94:c3:6f:46:03:02:2a:
         63:9c:cb:61:d4:cc:a8:ed:14:90:90:1a:28:3f:bf:18:2a:25:
         d1:b8:78:df:af:c1:d9:49:2f:da:18:0f:10:78:e5:4d:6d:e2:
         2a:0f:09:52:b4:38:4a:e0:03:47:a9:5a:3e:e0:27:c4:0c:35:
         bd:24:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:50 2025 by rpki-client