Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eb730230-66f3-343c-8288-1e04b7bdbdda.roa
File:                     eb730230-66f3-343c-8288-1e04b7bdbdda.roa (raw, json)
Hash identifier:          DrzRoJbG/Zg/5QefNsp1NmPdKicR/WnLNn92vOZ46r4=
Subject key identifier:   86:9C:F8:D2:1B:1F:25:AC:BD:05:8E:16:95:14:69:9B:E8:D4:A9:8D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A7BB0B3FE6CD2F546C4337A20
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eb730230-66f3-343c-8288-1e04b7bdbdda.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     174
IP address blocks:        173.232.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b3:fe:6c:d2:f5:46:c4:33:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=4adf9e29-e258-4816-a74e-9075a12b88e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:c4:db:a7:87:64:0c:dc:71:d8:67:4b:53:
                    96:b5:63:82:c1:2f:d0:fe:c0:c3:98:fe:5e:3b:c4:
                    20:7b:2a:84:bf:12:14:71:c6:e8:cd:a5:32:0e:65:
                    6d:5a:29:cd:57:ae:35:24:2b:4a:ba:c3:d1:59:0c:
                    74:a2:41:c6:6c:e9:03:da:b0:0a:4d:26:7d:ff:f5:
                    76:6f:2b:a3:63:10:d8:62:57:58:00:33:c0:d7:ea:
                    7b:e6:74:39:e8:8c:f3:99:82:d0:2d:0b:6f:24:ad:
                    2e:83:66:fd:69:7e:a7:c6:38:c8:80:80:b1:78:4b:
                    f1:8f:6e:10:d3:75:16:40:93:cf:5b:1c:3d:b2:a7:
                    cc:52:fb:5c:14:aa:2b:c0:88:c2:72:b9:5d:04:8f:
                    cd:ab:b9:23:ec:4a:91:82:ea:72:1b:38:85:56:64:
                    80:8b:d7:b1:2b:eb:d1:1a:78:16:88:11:b7:4f:8f:
                    d4:10:f9:62:71:56:6d:30:dd:4d:bd:2b:e2:ff:1b:
                    73:16:dc:7e:bd:c3:96:48:ac:26:8d:99:7a:98:ba:
                    d1:b8:1b:35:46:74:fb:fd:cd:06:2b:c5:3e:56:a8:
                    22:c4:10:fd:71:61:7e:b6:2f:9c:68:b2:ee:cc:51:
                    43:50:d9:61:09:17:03:bd:14:02:ff:f7:96:4b:49:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9C:F8:D2:1B:1F:25:AC:BD:05:8E:16:95:14:69:9B:E8:D4:A9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eb730230-66f3-343c-8288-1e04b7bdbdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:6d:cb:c5:a0:31:09:6a:2f:d4:51:a0:db:01:0f:dd:de:
         69:35:d9:87:8d:ec:16:56:34:dd:c1:ca:4f:5c:9f:56:1a:d2:
         c8:51:b5:4e:19:ae:50:f6:40:d7:c9:ea:22:ed:53:a9:f6:34:
         58:26:0b:4a:46:35:10:cc:2e:fb:e5:76:25:36:91:30:15:fd:
         49:96:80:aa:b0:84:e8:18:c8:fa:8a:2c:e7:c4:dd:5b:6e:40:
         94:b6:9e:11:b2:86:5e:f8:18:5b:34:1f:51:62:e8:a7:7c:c3:
         8f:9b:ed:39:d3:0f:68:82:52:95:44:e0:83:21:2e:4b:4b:fe:
         b1:4d:4b:28:11:ab:54:33:37:fc:26:60:f5:5f:71:8e:c0:8d:
         0f:b7:10:e1:70:ed:87:0f:96:12:96:c6:46:84:bf:02:ef:57:
         e0:19:f2:57:10:0c:af:7d:83:2f:be:69:11:1c:28:f6:87:1e:
         d6:df:77:30:98:82:20:10:46:98:fe:d8:f1:2d:9c:44:d2:cc:
         fe:8b:b3:8a:88:4e:29:10:b4:f9:bf:dd:35:9f:c9:d7:bd:2b:
         cb:3e:ea:27:92:c3:71:55:81:12:f0:e4:39:ec:2f:e7:45:72:
         06:dc:f9:a1:c3:d2:c3:14:0d:a2:7f:2d:a5:90:b5:99:95:cd:
         7a:01:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:57 2025 by rpki-client