Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
File:                     78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json)
Hash identifier:          vJCA6JusaM89JJwwT9sAFZ6G/rL+dsh/doeRKfpnvWk=
Subject key identifier:   5E:BC:44:8B:56:83:29:D8:45:28:5F:D0:67:3E:E1:2E:F9:46:7A:FB
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584AA8FDF7AD1864ACB7C2CD1B80
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     2914
IP address blocks:        142.147.128.0/22 maxlen: 22
                          142.147.132.0/23 maxlen: 23
                          142.147.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:fd:f7:ad:18:64:ac:b7:c2:cd:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=2fab4715-804a-4f75-8958-1488e74d25de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:0b:4d:22:92:26:ac:78:ad:ac:93:aa:f8:
                    5a:6d:7d:0b:da:cc:37:0d:1e:3d:9b:dc:58:b7:52:
                    d6:45:8d:96:3f:f1:93:65:e2:8a:ae:77:c9:2a:a9:
                    7b:aa:df:12:e1:70:08:9f:5a:57:b7:da:d6:6c:9f:
                    40:dc:30:5f:c4:df:11:92:30:ad:44:9e:a7:61:7f:
                    92:b3:fd:61:09:58:b7:00:f7:0b:5e:82:22:de:65:
                    4f:bc:23:b4:3a:ab:60:4a:19:8b:35:89:ee:80:11:
                    7b:ae:14:b0:2a:b1:a3:3f:ff:2f:d2:17:5d:b8:83:
                    50:0c:77:ec:e1:aa:aa:91:0a:ba:b8:15:ba:cd:b2:
                    47:81:c5:7e:4b:99:f5:57:a5:dd:84:c4:c8:88:b0:
                    c9:3e:6e:98:b2:63:0b:ad:19:0b:af:6b:53:13:8a:
                    ee:2d:f5:ee:c9:5f:dc:2c:ff:0e:d4:2e:f7:b7:f7:
                    35:5c:8e:a9:c3:60:24:bf:5a:4b:d0:53:2b:d8:5d:
                    d5:b7:db:6b:db:54:31:e7:2e:5b:f2:b2:3a:5e:5e:
                    5a:a8:33:ca:b8:70:c1:a1:34:e8:11:28:af:c3:c2:
                    c5:e1:80:b4:20:8a:4f:75:89:76:ac:f5:b1:c1:8f:
                    74:f6:94:a1:8e:1b:c6:39:58:9b:e0:93:a5:81:da:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BC:44:8B:56:83:29:D8:45:28:5F:D0:67:3E:E1:2E:F9:46:7A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.128.0-142.147.133.255
                  142.147.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:64:2b:de:63:5b:38:6a:f5:da:00:35:4d:48:e9:88:92:
         3d:4c:dd:25:09:c7:93:b2:08:56:37:74:dc:7a:01:8c:f1:da:
         98:4a:fa:8c:e3:a0:2f:30:8b:34:b4:5f:6a:21:cd:5a:56:5d:
         20:d6:81:6f:58:de:34:79:47:62:85:4f:22:b4:41:bb:e9:8a:
         4d:53:02:95:32:a1:ff:0b:67:59:d8:89:b0:19:50:ed:cd:79:
         f8:6e:6f:bd:c3:d3:da:f4:91:f9:d2:2d:43:ff:8c:31:58:29:
         c4:09:5e:f1:61:c6:e3:db:79:c3:ef:7c:ff:83:f7:bf:c6:b3:
         b3:79:9e:64:4b:20:db:77:ee:fb:d9:72:8d:f6:88:82:fa:ca:
         5e:83:67:1b:ff:0a:04:a9:af:93:57:86:50:72:99:f4:20:77:
         00:49:c0:af:a8:dd:76:a8:b1:01:5d:67:83:80:e0:36:53:9d:
         cb:1b:48:9e:7a:11:ca:23:26:e8:a7:f1:25:28:bd:cb:6f:f2:
         36:d0:56:26:89:7e:bd:19:26:f3:c6:87:aa:72:93:33:65:d0:
         6f:8a:34:48:7e:99:04:11:de:ae:75:84:00:7d:c1:1b:e0:d8:
         61:20:f1:bc:49:27:eb:20:9e:a0:27:a9:e9:08:c5:a8:c1:00:
         37:23:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:37 2025 by rpki-client