Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/41f9a886-fad6-388f-81b8-c0f79b1cc1ce.roa
File:                     41f9a886-fad6-388f-81b8-c0f79b1cc1ce.roa (raw, json)
Hash identifier:          0rW/xVGpFzNu+vV0zoVpuU8tK6BFe8FwFkuUoQO/9ho=
Subject key identifier:   71:57:09:D7:EF:6A:05:43:2D:BF:0D:F2:40:C8:89:CB:E9:88:D0:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161BCC6E8746648D5DE0D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/41f9a886-fad6-388f-81b8-c0f79b1cc1ce.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        47.231.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:bc:c6:e8:74:66:48:d5:de:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7cda2e9e-785f-49ee-96f0-b031b5a3771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:db:e1:1a:17:c6:35:d3:e5:51:d1:d7:8b:
                    d9:85:2b:63:fd:1b:74:55:41:8c:45:f2:15:4e:06:
                    81:d3:6b:c4:72:a1:82:eb:8a:d1:bd:35:44:1e:d7:
                    f8:a1:1f:87:ac:bc:22:ff:2a:29:c5:54:20:b1:8f:
                    6c:cd:d0:cf:aa:08:14:83:6a:56:6a:27:0f:34:14:
                    31:4d:9d:45:f7:47:83:94:1a:27:b2:0c:3e:93:26:
                    1c:d1:2a:1b:c2:b0:e6:5a:ec:d3:c3:11:e7:a0:a3:
                    31:90:c8:3c:f1:0f:d9:ec:b9:6d:6c:e8:95:42:b7:
                    7c:53:b9:90:45:70:72:cf:7b:31:c6:74:37:3c:97:
                    f2:1a:64:c3:66:46:ad:28:1f:3b:b4:ea:14:7d:8a:
                    78:e0:e1:d3:b0:3b:9e:be:a0:60:13:43:0f:60:bc:
                    15:fe:74:bc:c4:4b:33:8c:57:b6:f9:60:4a:9b:ec:
                    50:bf:8d:95:2d:e9:1d:64:98:65:b2:e9:cb:72:df:
                    b9:6f:86:fd:de:6b:2b:3e:b0:5c:c7:6f:e6:ec:4a:
                    7e:a4:c6:ae:a0:98:e4:9f:d4:dc:7a:ff:e4:d8:73:
                    6a:ba:fa:02:8a:b5:35:dc:15:b2:79:5b:40:d3:80:
                    14:e2:71:db:eb:01:23:f3:84:4f:29:38:10:7e:10:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:57:09:D7:EF:6A:05:43:2D:BF:0D:F2:40:C8:89:CB:E9:88:D0:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/41f9a886-fad6-388f-81b8-c0f79b1cc1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:12:34:27:b0:09:3b:00:ca:76:5c:4b:10:69:66:4e:d9:
         73:ce:69:00:78:f2:5c:7e:88:8f:2d:ba:4b:30:28:23:a3:1e:
         03:4d:d1:9b:49:0d:e0:c7:64:81:7b:77:33:a1:ef:c8:12:6e:
         27:92:6f:a3:42:23:25:ac:3d:f4:bd:96:18:11:9c:8a:a2:62:
         c5:22:4a:d1:0c:66:45:c4:10:5a:9e:ef:93:95:05:10:36:43:
         69:e5:27:2d:78:63:4d:7d:be:ca:77:b6:0a:e9:58:e4:99:cf:
         c0:de:9b:19:fa:ce:39:36:4c:4a:e3:d4:78:32:43:75:80:0d:
         14:04:f9:f5:42:d7:52:61:c5:c2:6c:c9:0e:ab:fd:d7:39:ea:
         95:6b:a1:40:d7:ff:78:ae:53:ad:3c:0f:89:3b:69:b8:2a:ff:
         30:ad:c5:19:23:a4:ce:86:06:b7:89:9a:5e:de:91:1e:89:aa:
         a3:d9:60:e0:ed:09:9d:71:10:ce:5a:22:e9:fa:cc:f6:7e:92:
         93:7f:e2:fa:49:19:c5:ec:b7:ad:1d:12:75:1d:3a:14:97:cc:
         02:7d:1a:df:1b:23:5b:09:4e:23:a9:34:5b:37:33:03:26:09:
         a2:f8:47:d5:6f:19:7b:63:22:1a:b0:7e:aa:ca:c5:df:78:1b:
         2c:7e:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:43 2025 by rpki-client