Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a17e96ea-9b4a-3f93-9221-7327e6cface5.roa
File:                     a17e96ea-9b4a-3f93-9221-7327e6cface5.roa (raw, json)
Hash identifier:          Ax5APR9aB2cW7tSt2O9RkjB/9QHTeK76tzUvSQVt2Pw=
Subject key identifier:   15:79:9C:49:01:2B:11:35:24:DC:D8:41:88:5C:7D:84:9A:EE:16:15
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF07018854E217405EB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a17e96ea-9b4a-3f93-9221-7327e6cface5.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394996
IP address blocks:        184.105.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f0:70:18:85:4e:21:74:05:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=de7ec4ad-b7d4-4e17-92ab-599263b03538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:7b:df:a2:15:63:fe:9f:19:ee:f3:66:85:
                    de:76:2b:1d:c0:cc:97:e6:df:61:c0:2d:59:72:b3:
                    2b:36:a5:cf:f9:69:f1:16:a8:a3:26:1d:98:f6:6d:
                    18:76:0f:92:24:ca:a0:ea:90:ff:85:2c:f2:8c:0a:
                    28:39:79:29:17:59:d1:af:76:f3:b3:ea:5f:c6:89:
                    f0:4c:45:44:ab:d3:c6:59:00:a0:ba:f5:32:46:55:
                    5a:02:75:7c:e5:c7:bc:f0:fe:25:2e:f2:04:95:40:
                    eb:14:2e:db:63:1c:77:72:db:bc:06:5f:95:c8:9f:
                    5b:45:4b:18:6c:6c:a7:de:c9:78:fd:62:99:72:6c:
                    c6:cb:e2:5a:20:d8:52:57:61:df:19:77:7c:47:0b:
                    04:f6:cf:bd:a6:8c:98:df:ba:2f:36:69:ad:d7:0d:
                    1d:1a:e7:c5:06:c4:b8:a9:4e:d8:41:60:84:2b:d6:
                    c8:9f:47:bb:39:68:50:cb:9b:bf:98:e8:fc:f8:9e:
                    d6:1f:f4:18:30:1e:9f:8d:f0:cc:43:20:67:99:12:
                    60:b4:31:b7:81:c1:4f:52:de:d3:71:64:d2:14:4f:
                    5f:41:06:ad:c7:e4:60:70:48:7f:29:01:25:f5:51:
                    ba:cb:cb:28:bb:a4:0d:b2:19:53:86:ad:3b:18:77:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:9C:49:01:2B:11:35:24:DC:D8:41:88:5C:7D:84:9A:EE:16:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a17e96ea-9b4a-3f93-9221-7327e6cface5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:be:5a:30:4b:d8:7d:de:84:2e:b4:68:1a:dc:ca:0c:71:c2:
         6f:0a:f5:d0:3d:97:67:70:f2:47:4c:eb:d3:32:4c:46:1f:af:
         c7:e2:be:30:4b:cb:bf:f6:94:be:a8:11:82:ed:ee:0e:f2:8d:
         81:21:41:3a:64:26:bd:43:09:9d:8f:cd:b8:4f:af:ff:af:9b:
         e8:e7:10:5e:7c:56:57:f5:7f:29:c6:4f:a4:09:27:0d:bc:9d:
         ba:f1:b9:c6:bd:3a:56:26:bc:86:24:dd:54:bc:b0:69:41:21:
         cf:5e:e4:8f:26:b9:97:32:ff:e1:c1:91:30:bb:12:69:79:45:
         a1:32:ba:7e:ad:e1:a2:23:8a:fc:41:72:f2:5b:12:68:fd:1e:
         3d:48:56:a4:97:0c:5e:c8:1a:95:3c:63:b2:7a:6d:2d:4f:b7:
         74:90:c0:76:a8:13:d1:57:91:d5:2b:cc:02:56:bd:27:fb:12:
         cc:74:0f:05:7a:a4:2c:3b:dd:05:d4:14:34:0f:58:07:db:08:
         e4:4c:ae:3c:02:6b:e2:bc:67:51:38:96:fd:a2:a5:de:71:9c:
         c7:7e:c9:a5:bf:f3:7a:4f:30:1e:61:33:d2:95:10:f9:a2:41:
         bf:00:ad:02:33:d7:2e:a2:7f:a3:c4:3b:2b:2c:3e:b8:a3:a9:
         7a:12:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:10 2025 by rpki-client