Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1665475d-501c-3629-bde0-3dbd33074ed7.roa
File:                     1665475d-501c-3629-bde0-3dbd33074ed7.roa (raw, json)
Hash identifier:          NRmoVlpnMqa7/RNkP6WbRWY7lLtGip+G+lUnqIigukU=
Subject key identifier:   A4:04:01:FC:6D:7D:F2:1F:46:0C:5E:89:D8:02:C8:B2:40:F3:0A:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF1312466FEC8B7AF9179B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1665475d-501c-3629-bde0-3dbd33074ed7.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     63949
IP address blocks:        172.235.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:31:24:66:fe:c8:b7:af:91:79:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=41bdc351-551b-442a-b54b-259eb8617c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:66:ba:aa:8c:4d:c5:84:f7:d3:c2:c9:bf:
                    61:55:50:81:90:e3:1c:e6:43:a6:a2:67:62:d3:b9:
                    63:e8:5b:19:07:31:3c:3a:32:b0:fc:9c:5a:e2:29:
                    ce:4f:f3:04:08:44:28:bb:b1:9c:0d:60:35:83:8d:
                    71:0f:8c:84:11:f6:71:a1:fd:30:dc:a2:fb:3a:43:
                    2d:bf:39:03:0c:fd:0a:85:b2:3f:c7:f0:22:c4:6d:
                    5b:4a:e3:76:92:2b:f2:9b:a0:aa:43:13:40:9d:cd:
                    2c:b5:74:b5:86:a7:bc:07:c7:8f:5b:59:c0:be:40:
                    f8:8b:c7:88:7e:2d:df:83:dd:de:28:bb:e1:ba:d9:
                    c5:56:54:21:7f:0b:a9:29:d5:fd:15:ec:7c:9c:2a:
                    42:5e:19:79:2a:76:9e:52:57:42:41:a2:16:e8:15:
                    e4:7b:06:4d:b8:cc:d6:02:5d:b1:54:e7:1f:87:d0:
                    37:3e:bd:f4:ec:20:08:95:ea:4a:7f:d1:89:08:62:
                    98:fb:d7:b0:d5:07:df:92:d9:c9:af:ea:9d:c1:72:
                    da:bc:3c:40:87:22:ff:02:17:d7:36:9a:04:cc:6e:
                    4e:1a:80:35:e5:47:60:97:64:8a:0d:9b:93:e8:0a:
                    92:38:43:6a:2a:7e:bf:3c:82:9b:d1:14:f6:4d:c4:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:04:01:FC:6D:7D:F2:1F:46:0C:5E:89:D8:02:C8:B2:40:F3:0A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1665475d-501c-3629-bde0-3dbd33074ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:3d:a2:56:70:6e:3e:aa:78:c3:eb:7e:7e:83:0b:9c:af:
         5e:54:4c:32:a2:0b:aa:c8:a8:6c:dd:f1:f0:39:cf:5f:5c:63:
         72:85:c9:54:3f:51:d8:66:04:0e:3e:69:06:ee:dc:3d:9a:32:
         24:e4:70:c1:b5:c8:ab:fa:d1:44:0d:65:c3:f6:b0:cd:10:51:
         fc:57:2f:e6:c3:23:f3:b5:de:3d:58:2c:ba:e3:a0:05:c1:05:
         04:cd:0c:8f:5a:55:12:ba:0c:c5:69:bc:69:fe:86:81:3c:d6:
         8a:1d:04:6d:29:83:b4:30:1a:3c:c2:91:91:28:48:ec:49:d9:
         f4:4d:47:da:dc:cc:b1:3c:96:b4:12:45:d7:cb:1f:4f:68:51:
         ff:13:79:32:5e:c0:79:bd:ff:27:19:e2:2d:3c:7c:d5:4c:33:
         c4:7a:3c:7e:79:d8:85:f4:34:0c:23:a8:e5:e7:5e:71:e0:42:
         ae:9b:df:4e:87:1a:d8:e3:76:ca:f5:6d:fd:cc:6d:3a:15:ec:
         68:c6:85:ed:cd:dc:a5:25:13:e8:7f:95:2c:e0:34:6c:3e:19:
         c2:17:19:3b:2e:f4:3a:30:77:1e:ad:d2:15:eb:db:8b:ad:af:
         43:79:2d:65:ae:48:94:a9:e6:04:52:4f:f9:c4:61:40:dd:1e:
         30:cf:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:54 2025 by rpki-client