Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa
File:                     4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa (raw, json)
Hash identifier:          4DZ8BZvRKSTs60dZdDYsZ18COMzjkTz/+siisA3QGFI=
Subject key identifier:   89:8E:1D:70:FE:51:1A:3D:C7:EA:2E:3E:00:EA:8F:4B:B1:2A:4D:14
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC0A22197478F26C635A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394996
IP address blocks:        184.105.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c0:a2:21:97:47:8f:26:c6:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=59416857-38bc-40ee-b065-d637f1407b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:7c:25:6f:74:09:a0:e3:a0:b9:62:6b:2e:
                    ad:db:fa:37:97:6b:8b:63:15:30:e1:00:ec:2d:ab:
                    4e:eb:d4:c4:8f:cd:5d:40:53:57:51:65:68:e9:af:
                    c9:27:77:66:2b:0f:ea:6c:8e:d9:04:00:59:71:0c:
                    0f:10:a8:dd:28:dd:b3:fa:5d:06:da:d0:43:ed:ec:
                    a0:97:2b:19:ef:26:85:de:47:c8:39:5c:1f:60:88:
                    be:bb:29:76:b6:0b:2f:13:27:30:5f:8b:c7:8a:bf:
                    58:23:1c:9b:ff:f0:66:b4:d0:48:10:0b:10:cf:65:
                    cb:46:4f:16:dd:fe:bf:35:c7:89:52:55:0d:0b:79:
                    ad:35:69:65:f2:da:d1:b6:4a:87:d1:93:34:60:bd:
                    94:50:de:1f:b3:2c:0b:2d:e9:7a:be:f1:6e:ee:81:
                    39:fe:7c:c2:9b:38:e5:27:8f:fc:e1:ec:f7:55:52:
                    1d:07:b4:ee:fb:22:78:9a:db:cb:e9:e6:0f:7f:9d:
                    ff:da:72:d0:01:23:2b:48:20:0a:a5:35:ef:dd:62:
                    47:31:df:ce:1f:90:b4:aa:a0:9c:3c:0d:d2:94:fc:
                    fd:fa:81:1f:f3:dc:4c:ac:6e:9b:ca:6f:61:8a:67:
                    c7:be:e7:35:44:84:72:32:ea:64:c8:1d:47:a8:cf:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8E:1D:70:FE:51:1A:3D:C7:EA:2E:3E:00:EA:8F:4B:B1:2A:4D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:a2:4f:7c:43:66:f0:45:c2:6c:da:f6:1a:6c:f9:94:f9:
         6c:09:a5:a9:41:4a:17:ec:78:f8:1c:78:1e:3b:2f:91:40:fa:
         88:a3:ac:7c:d9:97:e0:03:ea:83:7e:77:91:94:c2:54:61:44:
         0f:b1:a1:31:c2:39:5b:5d:12:d6:3e:2b:3b:3c:9d:1e:e9:7f:
         a0:37:8e:2c:fa:c5:8f:3b:8b:2c:d2:f9:5f:15:cb:4e:cf:1f:
         d0:14:00:2a:86:4e:e8:c0:1d:d5:8e:a0:0b:5e:2a:8b:7d:42:
         b5:82:95:fa:44:59:82:e2:c8:a4:fb:71:cf:16:fd:f9:c1:98:
         1c:78:0d:72:8e:b1:1f:6c:43:a7:7b:98:a0:9c:1f:d6:6c:7b:
         f5:a6:07:19:d0:5b:8b:4b:02:45:2a:aa:53:ec:98:90:b5:d3:
         a8:dc:37:d3:50:95:4d:4e:a7:46:19:39:1f:64:5a:81:90:ae:
         94:0e:6b:fd:33:a1:33:ff:8a:37:f0:1b:cc:1d:27:da:ec:b9:
         b2:2a:8a:85:a7:fa:ce:57:45:e8:1e:41:84:f9:b6:3c:ad:43:
         54:73:bd:bd:45:56:29:fc:d1:e4:bb:74:6e:51:0c:bb:81:9c:
         67:36:11:f9:f3:62:ca:47:3d:40:06:bc:15:c4:20:ea:73:b9:
         36:a5:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:46 2025 by rpki-client