Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa
File:                     2671e19e-be91-3e20-b41a-4a59d6d80866.roa (raw, json)
Hash identifier:          pgzpA8dRclMxlIj9QyZqWRGa3/yyA3uLzyZREDcfV/c=
Subject key identifier:   B5:3E:F5:F2:28:E3:CC:29:8A:7E:2E:FB:CB:C9:D9:46:6B:FF:DE:CD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A9D30F29817A6A7BEC9A91B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        108.177.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:f2:98:17:a6:a7:be:c9:a9:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=a0ca18ef-c413-4fa0-8078-e1420d1896f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:15:05:8c:33:bb:02:0a:1c:40:74:ae:08:
                    f1:a4:c4:f1:66:6f:c4:9c:32:48:39:0a:57:58:55:
                    68:3f:13:20:32:6d:92:6e:cc:1f:7b:99:3d:eb:00:
                    67:4e:73:36:b4:9f:f5:70:22:6d:c0:a1:46:9d:b2:
                    91:3e:74:23:9b:66:35:3c:37:cb:5e:03:11:b9:e5:
                    32:9e:2d:eb:b5:19:6e:1b:c5:04:d6:f6:8b:e3:99:
                    80:65:97:c8:b6:d4:7e:02:ca:24:0b:be:ac:45:25:
                    1d:2f:ef:9c:32:02:88:0b:2a:89:3b:73:f3:95:03:
                    83:94:1f:42:4d:7e:f7:e6:25:bf:7d:8b:96:7e:23:
                    c5:2b:b5:1c:86:12:f3:de:72:e0:69:82:15:47:07:
                    b9:b0:a0:07:f1:61:25:28:65:f9:6b:fc:75:e0:4f:
                    da:56:1c:73:56:ef:12:1e:70:75:18:6f:ea:73:33:
                    29:ad:a5:e1:bb:5f:83:7d:2e:de:73:39:e8:d3:d8:
                    59:0f:d5:34:fa:22:61:44:7e:69:5c:95:75:50:cb:
                    38:0d:ba:c0:13:43:d7:66:63:6f:8b:67:ef:13:87:
                    3e:54:f1:d2:27:58:96:94:00:d5:9e:99:38:7f:0f:
                    c6:66:c1:73:0c:5b:08:12:20:1d:78:dc:7c:c7:25:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:F5:F2:28:E3:CC:29:8A:7E:2E:FB:CB:C9:D9:46:6B:FF:DE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:f7:5f:b0:5c:d2:0a:96:ed:5d:8d:58:31:6c:07:97:a9:
         2e:19:8f:13:28:1a:02:61:20:c8:12:40:f6:d5:d1:29:90:f7:
         c7:6d:d3:14:b8:a5:ae:e7:4b:3c:d0:36:81:64:33:93:4c:22:
         aa:db:a5:2a:af:22:2b:a3:2e:c4:99:7e:ed:ef:5d:8d:89:49:
         12:af:e3:4c:73:16:62:ff:65:cd:af:76:04:76:cd:6e:7d:b3:
         0c:06:2b:76:f9:b0:f7:bc:93:86:11:97:60:f2:fb:64:59:36:
         f6:01:18:6c:cc:8d:93:22:4d:2f:e9:f2:a3:6f:8f:32:d9:3a:
         3a:26:ac:31:80:37:6e:32:0b:c6:69:02:28:b8:7f:35:d8:4c:
         7d:c8:0e:44:ae:98:07:da:8a:18:c4:8a:bd:cb:9b:66:36:82:
         c4:b9:61:fc:65:41:bc:c0:c5:87:9f:1e:5e:38:f7:47:f9:0b:
         38:f5:fc:2f:62:5d:f7:0a:95:69:25:bb:b5:70:3c:bd:82:1c:
         94:3d:21:3d:ef:4f:7b:36:5b:ef:d0:ea:87:6c:e8:02:2c:5f:
         05:1c:bf:96:c1:c4:98:f4:a2:ec:02:fd:3a:c6:3b:58:2d:9a:
         63:45:27:b3:6c:42:0f:4b:88:3d:4a:21:4b:0b:bd:38:1c:86:
         7b:55:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:00 2025 by rpki-client