Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa
File:                     06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa (raw, json)
Hash identifier:          VNMk346qMx3l1awpk3w2v1SG33dX7Ka2YA0qdkSRwNY=
Subject key identifier:   06:41:CA:E3:F1:88:CE:AC:21:08:F8:DD:A6:79:2B:BA:39:94:76:40
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841180682741FE186D22B200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:80:68:27:41:fe:18:6d:22:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0c529094-938a-49e8-ac02-ec696d59ea07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:ec:01:34:5f:5e:a0:13:a8:37:9c:34:c6:
                    e1:8b:65:af:54:b7:7b:ce:0d:63:7f:57:91:6b:65:
                    96:18:c3:c7:de:08:8d:42:38:40:55:a6:b3:ce:78:
                    2c:5f:67:42:5e:97:d7:66:f0:60:9c:10:77:14:97:
                    dd:78:11:0a:6f:6f:c1:16:48:a2:6c:2a:f9:32:bd:
                    4f:c4:b5:4e:0b:c2:ec:ee:39:ee:55:fa:2d:98:8e:
                    2e:b8:8f:5b:46:2c:90:67:0e:4d:d4:61:fd:dc:5f:
                    e7:14:dc:3f:d4:05:81:8c:b3:9e:b5:05:d8:25:fc:
                    33:a3:ff:43:0f:24:f4:ed:1d:23:28:42:89:d0:ee:
                    69:c5:12:0b:dd:11:08:c6:b7:c0:bd:99:85:f1:04:
                    0a:9d:7b:aa:75:29:0c:dc:c4:b9:3a:66:e2:50:4f:
                    ba:48:8f:f0:3c:7c:75:51:89:62:22:ff:c5:68:4f:
                    8c:37:2b:8c:a4:eb:73:c2:cd:2a:59:05:9e:28:1d:
                    03:11:88:e4:13:08:61:54:67:0b:7a:28:a9:d4:13:
                    48:02:66:13:af:61:65:90:64:8d:31:4b:5a:c5:be:
                    e3:e4:4f:d7:cb:a0:97:ab:40:9f:b8:19:8f:05:4f:
                    4e:a9:fa:87:1f:0c:ce:46:2c:68:4c:51:71:83:d3:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:41:CA:E3:F1:88:CE:AC:21:08:F8:DD:A6:79:2B:BA:39:94:76:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c39ec1-fa88-387e-9c83-e66cb3b48e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1b:9d:78:d2:aa:d4:09:1d:9d:1b:aa:76:51:55:27:87:12:
         08:22:ed:26:84:83:91:ed:9b:0e:f8:60:14:6c:08:83:e2:12:
         8e:99:80:0e:6f:d5:16:9c:b9:89:a9:f5:03:8c:29:90:c5:28:
         3e:f1:ec:d2:d0:41:21:0e:ea:2f:32:9b:f5:7c:d8:66:7d:39:
         ce:60:2f:e9:a3:e0:c3:da:14:2b:9c:47:ef:fe:61:fd:aa:65:
         cb:20:25:43:d4:17:7d:37:54:23:3a:81:34:05:b5:6a:1d:5c:
         41:32:98:57:a5:94:60:57:d2:9a:27:b2:13:58:6a:35:42:cf:
         f7:74:95:19:86:57:25:f4:48:45:b3:9c:cb:6d:ca:ca:2d:3a:
         d8:35:93:e2:8a:6c:d1:33:df:8e:0d:14:7b:4d:51:94:6c:4a:
         63:5f:57:44:2d:fd:89:ab:76:a5:3b:fe:a6:64:38:8b:bf:a7:
         62:82:98:d7:34:2c:cf:22:fd:31:3b:bb:ab:5f:ef:88:e3:7b:
         e5:a3:10:dd:48:4d:b3:f2:23:2e:8e:b1:2a:f7:31:5a:85:1e:
         0f:ba:5d:76:96:ec:15:91:99:c4:8c:a3:75:1a:43:e8:c7:ce:
         23:76:48:ea:76:ec:ce:fb:c5:d9:51:7a:b2:4c:65:49:cf:20:
         65:f9:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:15 2025 by rpki-client