Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d054cac-338e-395b-8965-a978e75463f0.roa
File:                     2d054cac-338e-395b-8965-a978e75463f0.roa (raw, json)
Hash identifier:          m28AiQqtPehOJSbGAWPY5CgR7bdxDAKRgZjNWnrRcZ0=
Subject key identifier:   FA:0F:47:CD:BD:FC:87:42:CD:7B:BE:7F:4D:E2:6F:AE:26:C8:5C:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC256AEAAB898ACB4D3280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d054cac-338e-395b-8965-a978e75463f0.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        107.4.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:25:6a:ea:ab:89:8a:cb:4d:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=23657d08-e18a-4f1a-9b09-3c7605cfa9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:6f:e8:2e:7e:50:9b:52:2b:f6:9d:d3:bc:
                    7d:ef:96:e4:8a:ef:22:04:b1:35:c8:35:2a:c7:1b:
                    02:f1:a3:60:76:d8:e9:44:27:63:3d:6f:b7:9b:44:
                    c8:1c:2f:cf:7c:43:ed:46:a5:eb:48:ac:71:be:a9:
                    36:29:e0:d3:63:6d:ce:bd:ed:31:99:eb:b7:57:46:
                    69:de:e4:58:6b:39:ab:7f:06:67:80:f5:44:e2:0b:
                    0d:d6:82:6d:0b:e3:b4:c7:ab:c9:8a:e9:7c:75:26:
                    e8:9e:f9:39:d1:db:2e:21:6a:04:4e:38:2b:52:b3:
                    71:72:db:bb:2e:9a:47:d6:a7:ca:66:ae:19:27:4d:
                    df:0d:98:fa:28:e0:8c:b2:51:75:99:6a:5b:8e:33:
                    1a:cf:ef:d1:9b:62:66:bc:39:fc:9a:af:17:87:d9:
                    e4:f9:0d:79:49:ee:cc:36:d3:8e:b3:23:9a:85:b5:
                    4d:5e:b6:c3:38:0d:ca:ae:76:49:c1:48:5c:51:2c:
                    78:e8:4b:8a:7f:0f:7a:41:08:94:06:0c:8b:bc:33:
                    cb:a2:03:f2:f8:0a:8a:58:c8:28:a9:99:65:bb:e7:
                    0a:46:96:dc:1c:33:60:56:e9:aa:b2:33:96:4d:4f:
                    1e:38:23:dd:90:ea:61:a2:0e:a1:10:41:a1:39:68:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:47:CD:BD:FC:87:42:CD:7B:BE:7F:4D:E2:6F:AE:26:C8:5C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d054cac-338e-395b-8965-a978e75463f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:b1:52:24:b4:a1:ac:5f:1c:ae:2a:a0:8d:8d:71:5c:61:
         b8:f4:62:d4:4f:8a:6a:e4:15:25:f8:24:b6:78:ae:24:84:d4:
         c6:e1:8c:37:c1:45:43:6f:c4:17:ab:55:a0:91:4a:09:87:15:
         8f:d0:20:fb:16:0e:60:11:e7:22:82:91:36:69:02:af:a3:23:
         1f:3e:be:b9:6a:6e:2f:3b:a0:58:2e:6a:1e:fa:01:63:de:cc:
         a1:87:a3:63:07:16:14:42:34:89:c1:78:16:fc:4e:f9:6f:2e:
         a2:e1:e0:d6:7b:92:c2:b0:4e:5f:dd:73:44:b1:5e:15:2d:71:
         a3:6a:af:38:c0:f9:9c:11:9f:96:51:59:f9:f1:6a:cb:8a:82:
         af:6a:69:7c:55:90:d7:11:f3:4d:b2:ab:1a:f5:e5:85:fd:f5:
         fc:f1:ad:b0:29:23:95:6d:9b:4b:85:62:ef:7a:05:df:a9:93:
         cc:f7:7d:1f:03:d2:15:19:60:f6:bb:ff:a3:27:68:21:6d:3d:
         a4:c2:a8:0d:16:cd:77:34:17:8b:04:77:f3:a1:d8:5b:eb:99:
         1e:ab:63:56:fc:50:ab:9f:75:8c:e6:86:52:c7:c5:66:ae:47:
         f4:57:b0:9b:3c:b0:58:6a:2e:4f:99:71:76:16:48:b4:fa:1d:
         c3:c7:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:16:26 2025 by rpki-client