Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa
File:                     7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa (raw, json)
Hash identifier:          J8IeArt60a46qjZKb8fbDDfFWXClMV8hv8uK6S6WvsI=
Subject key identifier:   43:A8:BA:DF:B5:7B:BA:B2:8E:FA:AE:A8:7E:F3:CB:F7:2E:F4:11:06
Certificate issuer:       /CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1
Certificate serial:       010D0C9F4328584ABA80C89F0E7908356FF490DF
Authority key identifier: 39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     30162
IP address blocks:        23.149.24.0/24 maxlen: 24
                          23.170.208.0/24 maxlen: 24
                          23.170.209.0/24 maxlen: 24
                          64.250.96.0/20 maxlen: 24
                          208.87.120.0/21 maxlen: 24
                          2605:d780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c8:9f:0e:79:08:35:6f:f4:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=a6c0f333-8a90-4d54-80f9-899f49f8de83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:a8:d3:e9:36:f4:29:5b:79:a7:21:0f:7a:
                    24:e5:b7:9d:5a:c7:79:37:f6:f5:5e:f4:bd:ed:7b:
                    44:7b:7e:d8:2a:a3:f4:93:2e:99:e1:46:1c:d7:35:
                    0b:9c:6f:b7:d1:26:d0:7d:1c:58:96:97:32:be:47:
                    41:d8:1e:fd:c5:6f:3f:c4:cc:9d:ea:b0:a5:ae:b0:
                    0a:17:54:33:85:ce:0f:c7:6e:71:55:b9:4c:24:20:
                    08:ef:77:73:8f:04:3f:dc:85:cb:bc:1f:66:fc:49:
                    28:f7:04:44:a6:f8:3e:22:a4:f6:1f:65:b9:8b:63:
                    d1:e8:5a:8f:e5:38:8f:f9:0e:a0:50:64:4d:62:6f:
                    55:88:68:03:53:28:53:1d:03:05:fb:9e:36:21:36:
                    dc:a5:69:30:27:0c:37:7e:ef:9b:8e:b4:fd:b9:33:
                    ce:cd:40:e9:dd:1f:e1:63:c6:ca:8d:9a:f9:8e:d8:
                    ca:1c:ad:5c:5c:1b:dc:4e:16:36:81:06:e2:f3:93:
                    c9:70:b8:34:60:8b:04:90:85:6b:0d:d4:5d:08:95:
                    5a:4c:9f:1e:0a:fc:03:bc:7e:e1:3f:f8:a5:d3:b7:
                    81:88:68:36:17:7f:36:6c:49:28:70:e2:0f:33:69:
                    23:7d:ba:35:91:5b:04:3b:26:7a:6e:84:30:2e:9f:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A8:BA:DF:B5:7B:BA:B2:8E:FA:AE:A8:7E:F3:CB:F7:2E:F4:11:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl

            X509v3 Authority Key Identifier:
                keyid:39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.24.0/24
                  23.170.208.0/23
                  64.250.96.0/20
                  208.87.120.0/21
                IPv6:
                  2605:d780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:76:ff:dc:35:93:e1:6e:c7:50:3a:f9:ec:a1:01:1e:9a:95:
         e8:72:e2:76:62:34:9e:e1:87:36:16:8f:c3:26:a0:c1:a7:fb:
         5e:25:7f:3c:c6:cb:fb:a1:c8:61:ef:1b:a0:4e:49:f1:35:d9:
         55:33:0a:8f:0e:83:a5:51:fc:e3:68:80:8c:29:1c:59:3c:17:
         3c:41:ed:12:e0:c3:e2:e0:e9:78:7e:00:e6:24:3b:9f:d7:05:
         0a:3a:f9:f5:91:da:51:5b:aa:d9:05:f5:c9:f2:34:1f:b0:8c:
         b8:c2:e8:b4:8f:e1:84:58:30:84:46:ef:46:56:85:5f:ca:27:
         59:bc:a0:d6:45:1f:b6:db:8b:fb:5b:1f:43:a9:ea:b9:8f:aa:
         90:4e:3b:fb:14:d6:5e:5b:97:32:2d:43:27:2f:bc:e2:b0:65:
         96:1f:5a:52:20:5b:cb:49:6c:d6:5d:73:9c:c1:30:18:0f:c5:
         e1:15:d9:cb:76:1b:1f:22:6a:41:9b:8f:a0:b4:86:97:3e:66:
         6a:b1:21:a6:cb:45:20:22:e4:bb:73:fa:58:5e:8c:d4:d4:ad:
         a4:2e:4f:5b:73:de:b8:f4:70:1e:9d:83:85:2c:47:3c:15:ad:
         f9:b1:ca:4e:e7:11:c5:61:bb:f1:b1:43:2b:5b:f2:c0:25:aa:
         97:4f:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:29 2025 by rpki-client