Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa
File:                     693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa (raw, json)
Hash identifier:          USfTNC1YU+lQoIXZ7SYdHHWMzmm1qD+RnTdbjfGvlSM=
Subject key identifier:   96:0F:39:45:B2:77:B9:76:93:F5:7D:A1:98:A8:C8:A4:EA:EE:F5:E2
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584AB6510518DF9CE22DE4D3A280
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     25655
IP address blocks:        173.241.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:05:18:df:9c:e2:2d:e4:d3:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=8eac3efe-801d-443d-b6c0-e68169b3e608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:6d:f7:88:68:d6:9f:85:90:a6:7c:32:b7:
                    de:08:1a:3a:28:13:6c:2a:9e:6f:00:81:2a:cc:00:
                    e1:fe:31:18:8a:5e:91:e8:b3:28:97:7f:a7:5a:ca:
                    2c:93:4d:fc:6f:b6:a3:89:c8:dc:77:1f:49:8d:fb:
                    4f:fe:72:43:15:87:7d:b3:a2:db:4f:3a:a8:bb:54:
                    00:03:a5:d2:cc:09:b9:80:4f:fd:15:0f:a3:c3:e0:
                    6a:ec:5b:9c:dc:6f:53:33:af:63:8e:40:be:51:71:
                    77:26:cd:86:ec:0a:c6:31:f5:9e:d4:75:b4:3b:1c:
                    90:07:ed:ac:5a:d4:fa:d0:c9:65:91:76:2a:b2:5a:
                    5e:fd:4e:13:ef:5a:9e:86:3c:25:13:95:76:8f:11:
                    0f:a6:58:d1:61:9f:8e:1f:0c:9a:f3:32:80:98:89:
                    12:e5:38:d7:08:34:5c:32:df:d9:78:64:85:dc:e5:
                    7c:68:db:fb:51:9a:cd:d9:e2:f3:e5:cd:64:e2:45:
                    b7:8a:d4:87:ab:43:5b:bb:be:88:22:62:4d:f7:ce:
                    ef:42:d0:04:e4:ba:2f:6a:ab:ec:6d:8f:cd:b2:5e:
                    5a:0d:36:66:f7:71:ea:b1:f0:6f:7d:15:eb:2c:07:
                    1a:9d:ff:e5:c8:db:e9:38:15:72:91:89:83:90:33:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0F:39:45:B2:77:B9:76:93:F5:7D:A1:98:A8:C8:A4:EA:EE:F5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:5f:8e:f8:2f:de:ef:66:15:98:6d:bc:a2:e6:44:7f:0e:
         48:17:37:96:f1:40:ab:94:ac:f1:d4:a6:b0:55:8b:4b:7c:59:
         cf:76:73:de:2b:5a:17:bf:33:bc:02:d0:bd:7c:72:43:66:ce:
         b1:31:82:af:a5:5a:ea:7d:1c:1e:a7:2e:fe:e8:47:a2:86:03:
         88:9a:bb:17:ba:cb:18:a5:fb:49:b6:88:96:d9:75:ae:b9:ca:
         ef:ac:79:0d:47:90:f4:fc:7d:5b:65:7d:3c:a3:db:16:00:60:
         59:40:f7:c2:f4:44:97:d5:50:a8:6f:a4:ea:bd:d3:31:b8:eb:
         e6:b9:0d:e8:2d:3c:de:f8:27:5f:3f:9c:49:7c:60:4b:38:4a:
         03:bb:3c:40:a4:6a:30:45:8b:70:29:e2:a7:8d:87:6c:7b:82:
         eb:16:76:9d:f8:fb:11:92:d8:77:b9:df:af:64:db:df:60:7f:
         8c:6e:0e:c4:e9:99:df:d0:92:07:44:33:a6:90:3b:7d:fe:29:
         c4:28:56:5d:b0:58:e8:6d:aa:e8:11:48:d0:18:ff:b3:32:e5:
         4e:f3:4f:31:d0:cd:9e:72:c6:44:4b:90:2f:65:c1:6b:9d:dc:
         a4:cf:bd:fa:1b:22:86:65:6d:b0:ce:1a:b9:86:de:b5:f9:18:
         b2:ca:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:16 2025 by rpki-client