Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa
File:                     847d8ab5-2804-3989-95b6-9f3006588f5a.roa (raw, json)
Hash identifier:          oL2JRrscKg7v1fN+KYOWqi8dnCzg5AGQldGmIKCPyoI=
Subject key identifier:   FA:44:49:1A:D0:AF:BF:83:94:72:A4:6A:A8:9D:DE:D2:4B:A1:C1:64
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84118AE98B09D0F18FA41800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8a:e9:8b:09:d0:f1:8f:a4:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=928e7ed0-2586-42d7-a35d-3412aaadb6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:06:fb:d9:37:dd:d6:3a:55:54:4f:89:32:
                    58:d1:1b:67:16:61:6f:8f:f7:0c:9c:ed:74:bd:d2:
                    8c:b5:0e:85:8c:3d:e9:9a:b1:14:dc:52:95:01:74:
                    da:e9:2e:46:a2:f6:7d:7e:ab:c6:81:a0:18:f5:69:
                    e7:81:83:da:c1:c3:5d:37:b6:ba:04:7b:f2:c5:1b:
                    ae:7f:13:47:ef:7c:ff:51:8f:2b:0c:6c:f1:46:e2:
                    98:c1:b3:88:b2:e9:6c:a7:76:de:01:72:3b:99:35:
                    b5:a7:04:1f:64:6a:7d:cf:7f:d3:a9:88:52:63:49:
                    ca:da:59:97:6e:51:31:9f:68:e6:30:b8:2f:e0:5d:
                    e9:f0:d1:d0:15:8e:3f:b2:20:56:c1:81:46:26:23:
                    01:42:69:6b:5b:bf:31:7c:6b:e2:2c:87:4b:b2:02:
                    6f:ba:72:bb:fe:b5:89:3c:85:86:47:95:56:24:da:
                    53:97:64:65:93:35:20:30:42:db:db:58:63:ea:33:
                    07:4b:c9:33:ff:08:7c:99:52:60:44:ee:15:15:5c:
                    b6:18:88:ef:e7:73:6e:e6:e2:fc:c6:d0:5d:f7:cb:
                    32:75:73:0d:c1:ea:74:c2:dc:7a:65:ea:36:fa:c7:
                    b9:c2:60:27:9c:7b:71:81:ec:a9:15:a5:b9:fc:2a:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:49:1A:D0:AF:BF:83:94:72:A4:6A:A8:9D:DE:D2:4B:A1:C1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:4f:dc:cc:33:85:3e:b3:e4:2f:3d:c6:b8:cf:6f:fe:7d:
         8c:a4:6f:1b:04:02:ef:60:b6:2d:db:76:bc:26:dc:e8:2f:97:
         d7:1e:d8:12:79:db:ad:5d:f3:b2:3d:86:7c:fd:51:44:68:70:
         2f:99:92:5d:88:89:2b:e5:97:c6:3f:22:b2:90:ad:33:c0:46:
         10:35:6c:bc:96:f1:5c:9f:9b:c5:fd:66:02:3f:d2:e8:c6:17:
         d2:16:a8:cd:7a:4f:3c:af:66:b4:09:de:57:4e:94:63:72:e2:
         f2:68:20:92:81:a3:e1:bd:6f:2a:92:e6:aa:ef:ee:94:c3:35:
         2a:5b:74:e2:aa:79:8a:13:16:44:8d:60:d4:ee:37:17:fd:0a:
         c2:7f:2e:81:12:cf:f5:ef:47:44:59:2c:8b:80:aa:62:bd:68:
         4b:28:0e:75:91:66:d6:00:eb:4d:50:f2:9d:49:96:38:b3:72:
         0d:ff:99:4e:fc:80:0a:95:64:f2:34:1e:c5:b4:f1:22:05:ab:
         5f:0c:b4:8a:16:ab:ce:94:20:5c:5d:75:07:f7:13:d2:7e:e9:
         6e:f8:36:0e:22:54:b2:4d:a6:88:44:a6:52:15:dd:22:e6:c5:
         c6:2c:97:ac:a2:47:02:5b:c5:35:a2:d3:82:69:40:65:45:0e:
         e8:a0:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:24 2025 by rpki-client