Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa
File:                     a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa (raw, json)
Hash identifier:          FAx4rlo1pbM8S/bqmbPVxZnM33Jcx+pTx0AhC003ITI=
Subject key identifier:   16:0D:43:8C:AD:DF:4C:E3:DE:49:E0:17:41:83:37:30:3E:31:67:3B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A8411788ACD0DAC62D68B0600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:78:8a:cd:0d:ac:62:d6:8b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aa7655de-d67c-488a-ab93-d6c9e818d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:bf:65:2f:41:0b:fe:6d:14:40:0e:65:43:
                    3a:94:3d:e1:d0:39:0b:a8:42:f3:be:d0:d0:11:05:
                    d1:99:5e:ee:7f:ad:55:6a:0e:07:da:3c:1d:45:05:
                    a7:49:c2:92:eb:af:5b:c3:29:96:1f:da:a4:eb:bf:
                    07:a6:b6:b4:67:04:f8:b8:9b:0b:3b:2b:7d:a9:db:
                    8e:7e:d9:a1:0e:a7:ea:bb:48:d8:6b:93:1c:08:30:
                    f9:45:f4:aa:ce:9a:3c:fd:e7:82:34:40:b6:69:f0:
                    4e:7c:c4:9d:cc:f3:5c:62:3b:c3:2f:fc:7e:f9:66:
                    c6:6b:12:50:74:c6:20:05:51:9f:e6:d3:fe:c3:4c:
                    54:db:0e:21:2b:67:e7:07:76:15:fe:38:cc:be:32:
                    c0:86:e4:5b:4e:2f:26:89:13:a6:d8:2a:56:8c:6a:
                    63:09:f8:82:ad:b0:7f:33:60:5d:20:d0:4d:b3:a2:
                    1e:98:cd:98:fb:e9:0e:3a:18:47:5c:b8:d6:1b:0e:
                    ee:59:99:4c:c4:5f:09:8a:a6:11:5b:27:75:b3:1e:
                    45:1d:32:ef:c6:87:1c:f7:55:fb:43:66:1e:60:64:
                    b6:bc:c0:44:11:28:13:1c:0d:3e:a4:af:e2:fe:9f:
                    a7:2e:38:65:8d:e7:07:cf:94:61:3d:65:11:3c:77:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:43:8C:AD:DF:4C:E3:DE:49:E0:17:41:83:37:30:3E:31:67:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:42:f4:4a:30:2b:cf:f2:08:6c:e4:a8:74:22:60:0c:92:
         8d:f1:a4:b5:13:cc:b0:4c:e2:c7:07:e6:6f:fb:5e:f0:17:f4:
         b7:6c:6c:dc:e2:50:25:a5:ff:dd:cd:67:23:7e:06:ad:16:f0:
         ab:7c:96:78:50:df:6e:7d:77:fd:9b:95:5e:d4:9e:e3:12:78:
         bf:1a:3a:76:4a:40:ef:85:cb:ea:98:eb:74:b7:e8:9e:3b:95:
         61:f5:af:0a:30:55:bd:c5:19:d7:34:a5:f3:84:1e:74:88:e1:
         8d:ad:b9:78:04:b3:ab:f9:59:19:42:6a:a5:b2:c6:77:f9:ee:
         7a:2c:21:7f:ad:fe:c3:12:76:7d:6a:05:96:43:87:78:65:59:
         82:30:f9:82:4a:de:3e:24:4e:45:04:0d:c8:02:0d:5f:27:51:
         35:01:03:ee:a3:b9:54:1c:b3:48:07:e5:8b:56:73:b8:de:93:
         2f:4e:4a:e9:8b:6a:14:76:35:5c:ad:d6:c2:a8:e6:81:9e:d4:
         7c:b5:de:5b:45:2a:c0:f3:6a:d1:e5:a7:05:6a:4b:cb:fd:d5:
         31:01:57:13:69:fd:01:80:32:ec:a8:83:e4:3c:32:e6:20:e7:
         52:19:94:33:04:7f:ac:fc:a3:e0:66:fd:58:ab:3a:84:b6:11:
         de:9f:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:44 2025 by rpki-client