Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa
File:                     69bcf842-176d-3e20-9648-54a62aa8308f.roa (raw, json)
Hash identifier:          WK5Wtrld73LdueDJMAel5qtlEomxvcslKwI1HqewRwQ=
Subject key identifier:   12:8F:92:26:A7:ED:01:FD:FD:55:CC:27:90:D9:59:1D:28:EF:4E:1F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84122923486126C1EE5CA651
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:29:23:48:61:26:c1:ee:5c:a6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=343f71dd-0187-4638-b3f5-9dd27932d0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:ed:3a:0c:32:e9:11:4e:c7:b2:9a:21:e1:
                    e0:1b:c7:cb:da:06:de:8d:f9:ff:43:c7:be:40:81:
                    35:ec:36:8c:d1:73:83:41:a7:c2:39:50:16:c1:c7:
                    e6:9d:c8:57:e2:27:09:3e:a8:1c:a2:66:38:25:7b:
                    4d:13:e8:9a:f1:7c:e6:db:fb:3f:92:ce:d6:a5:a0:
                    c7:be:88:28:c5:8f:b2:a6:cc:ab:1e:da:ab:a0:26:
                    f4:ec:31:7b:97:f8:b2:ce:37:0b:80:aa:db:50:44:
                    cc:e3:92:ee:2c:45:63:e6:06:6c:8d:95:b9:40:3a:
                    43:13:ed:30:62:5e:5c:b9:98:47:12:4f:9b:e7:2b:
                    c6:5b:92:a9:ec:15:b9:f1:93:ec:ee:58:b0:f0:8c:
                    ff:62:4b:d4:ef:32:b3:75:06:99:54:54:50:fa:d7:
                    23:e2:43:49:25:aa:9e:04:58:0f:0f:ac:55:92:cb:
                    7c:b9:10:5b:55:66:e9:c3:15:9b:6b:01:7f:a2:4f:
                    f6:29:b9:de:03:66:67:86:fd:18:c6:2b:fb:64:fb:
                    f7:f2:0e:47:7f:94:86:61:3f:af:c7:df:87:9c:f6:
                    2f:a2:19:d9:e9:3a:af:80:1b:e2:85:fc:1a:da:a1:
                    dc:61:4f:97:d5:49:ad:2b:3a:bb:fb:89:24:ae:92:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:92:26:A7:ED:01:FD:FD:55:CC:27:90:D9:59:1D:28:EF:4E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:5f:48:ec:2d:f7:19:ef:e1:ee:69:71:09:ca:a7:51:f6:
         f0:47:d8:24:aa:11:51:ca:b4:49:e1:e5:b5:87:c3:05:76:e6:
         39:ae:00:0d:55:bb:34:36:44:00:39:6a:df:6a:6f:52:04:c6:
         d4:ee:8b:74:db:08:ab:fe:bd:d2:0d:00:27:88:3b:60:0f:15:
         5b:77:7e:78:19:fb:35:07:09:05:b7:b1:a2:01:1d:e6:80:2b:
         b4:bd:d5:3a:ee:b5:e0:2f:cf:b7:9c:8e:65:1e:1a:e0:64:94:
         c7:63:1a:b4:39:29:69:02:49:41:09:4e:af:73:7d:39:2c:d2:
         f3:c1:e3:dd:5d:75:81:8b:43:ac:f4:54:d3:91:8c:2d:23:b5:
         62:80:35:11:b8:a7:56:90:1f:d4:ea:98:d4:43:c4:18:8e:95:
         33:76:dd:66:1a:38:81:72:cf:c4:c4:73:9d:de:c5:58:30:94:
         27:e8:d2:36:74:39:22:f2:53:78:c5:76:1a:89:0b:6e:c3:4c:
         85:be:63:a0:33:da:65:a7:5e:0b:2f:d1:81:8c:8b:0d:f9:a5:
         6a:e0:ac:9e:d5:67:2e:3c:3a:d8:44:bb:4f:99:39:f7:09:40:
         b9:f0:00:b1:49:b6:b1:40:f3:af:20:20:0a:74:2c:37:ff:ae:
         d6:fb:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:46 2025 by rpki-client