Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13574758-2d4c-3b3a-b3ed-ca8fed18a624.roa
File:                     13574758-2d4c-3b3a-b3ed-ca8fed18a624.roa (raw, json)
Hash identifier:          58ozRB1Px11rwkyNccEFELMzF4t5IUukm/UX2yG0Lac=
Subject key identifier:   7B:CF:A0:EE:BF:02:F8:95:1A:16:37:DD:10:93:64:8E:FC:E5:30:DB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A7E7B79008A53CA7E7432FEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13574758-2d4c-3b3a-b3ed-ca8fed18a624.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        108.170.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:79:00:8a:53:ca:7e:74:32:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=9f9f3d17-06a3-4e89-82d8-c14945d7674d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:cc:d6:77:d6:c1:80:79:6a:8a:1d:47:98:
                    dd:b5:ee:f2:0e:87:73:cc:5a:b7:66:b8:6f:9d:2c:
                    5f:e4:61:0f:1a:17:ba:60:6f:e3:8e:71:4e:02:3f:
                    37:6f:c3:84:43:3d:3f:99:4a:1e:ea:39:a8:7a:5d:
                    15:e1:50:11:20:31:a7:f7:c4:4f:aa:6a:84:91:f2:
                    34:99:ae:3b:9b:67:34:e5:90:40:88:e2:48:e7:f0:
                    31:50:b5:2c:f1:3e:c4:5f:fb:3a:62:52:be:d3:40:
                    8f:e4:96:e8:59:ea:bd:4b:a8:bb:16:2a:81:34:80:
                    6d:a2:95:56:2e:ba:d1:cf:54:44:4d:7e:a1:a5:e7:
                    6f:11:d0:0c:c3:0a:53:f1:17:ba:e0:2e:90:99:4b:
                    03:70:73:79:6c:02:0a:44:20:cd:8f:f4:c6:f0:a9:
                    ba:89:5c:4a:29:c1:73:f5:54:d9:ad:e9:21:99:72:
                    b0:2e:99:e1:a0:9b:4f:ea:4f:fc:34:15:b2:f6:5f:
                    46:2a:c1:7b:ca:a5:bf:16:33:31:9c:9e:32:35:fa:
                    f0:2c:7d:78:e0:60:88:1b:95:c8:18:30:1f:6c:16:
                    2f:b4:f5:dd:dd:40:a8:5c:83:b5:64:73:14:d5:ca:
                    3c:9d:71:a9:b1:44:52:3a:63:aa:25:c2:75:cb:ed:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:A0:EE:BF:02:F8:95:1A:16:37:DD:10:93:64:8E:FC:E5:30:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13574758-2d4c-3b3a-b3ed-ca8fed18a624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:95:02:29:ee:cf:17:e4:e3:cc:5a:5d:43:86:92:e7:87:5b:
         0c:ee:e5:33:8f:51:91:a9:c4:66:8a:80:a8:5e:fe:b9:85:f4:
         4c:6e:59:65:71:47:0e:1c:94:f2:62:b7:13:e6:fd:90:4b:18:
         07:17:a1:6b:4f:5c:d3:94:82:61:46:40:ee:3f:22:51:82:46:
         e8:c4:fc:84:b7:ab:c7:dd:e0:94:da:f2:c0:c8:a7:2c:63:5e:
         21:2f:72:63:a1:f0:a1:11:ba:3e:71:40:c7:9b:b6:dd:51:56:
         ec:0d:78:59:2d:0e:c4:e8:b8:93:ef:b0:b6:15:de:4e:8f:2a:
         3d:af:8c:78:cf:fa:e1:e9:fd:56:07:77:85:35:c3:16:50:e8:
         d5:68:c7:0e:b2:6a:87:e1:40:f4:df:50:68:54:44:fe:8b:ed:
         b4:8e:5e:03:90:d2:16:b6:33:c3:fa:0c:ca:71:05:05:c4:98:
         ec:87:ea:cc:df:5e:fb:ce:d3:00:b1:e7:15:10:7f:d8:53:69:
         01:4b:d7:e1:43:85:4c:3c:92:15:2d:4b:35:d8:33:99:a0:7e:
         93:be:4e:6d:6e:02:45:31:00:de:8b:fc:98:26:ee:ec:41:46:
         fa:7e:ac:5f:2d:0b:c2:f3:28:e3:16:f8:1d:65:65:29:2b:79:
         08:b0:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:42:09 2025 by rpki-client