Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa
File:                     d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa (raw, json)
Hash identifier:          ZjZJVbqo66EX671NYHwiiXV+Rg52Zzyq3nPGfLit04Q=
Subject key identifier:   91:F4:19:D3:A0:73:B7:84:C1:DF:61:93:17:CD:16:B7:29:06:20:EF
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584A5CFB27C124E85F8305F50FC0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     46606
IP address blocks:        162.144.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:27:c1:24:e8:5f:83:05:f5:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=8fe975f5-9eb0-4be6-a5c2-5304b09821ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:c7:05:10:0c:f2:26:5e:07:fd:0e:4e:84:
                    c7:ec:30:be:27:05:17:0d:1a:91:80:b3:2b:0c:1f:
                    a7:16:9a:8b:0c:e6:39:5a:a9:ab:4d:76:74:68:29:
                    2b:a5:c6:72:e7:0d:e0:ca:34:e4:fc:54:8d:c1:e3:
                    8c:cc:94:83:1d:0c:4f:68:74:a1:1a:24:1c:62:4b:
                    d5:1b:e0:89:d4:0b:05:ee:c8:b3:d1:a1:16:5b:24:
                    c7:e1:b9:20:71:3f:e1:7a:0a:1e:05:83:a4:64:01:
                    81:d1:27:76:da:58:09:b4:93:2e:0e:ed:4f:09:8c:
                    c7:ba:f2:fd:0d:2d:e9:a5:30:08:f6:5c:57:87:f7:
                    bc:7e:47:dc:94:90:a0:ac:c8:79:75:5d:38:df:65:
                    8b:42:e5:1c:73:37:cb:39:a6:ad:19:c7:cb:2f:d3:
                    f7:ee:50:e7:4e:40:b5:4b:f5:3f:e5:59:75:65:24:
                    fe:06:4f:e8:59:69:1a:0f:62:1f:8e:9a:4c:8f:b0:
                    75:39:92:90:33:7e:e4:af:a9:b5:c0:e1:a7:c1:fc:
                    72:23:63:63:3d:a6:a3:38:60:41:c7:cc:cf:86:75:
                    fa:be:15:dd:bf:de:c9:73:a7:8d:8e:28:e4:19:1e:
                    d5:1e:d3:57:45:df:e6:70:ce:a7:f0:d1:72:05:1d:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:19:D3:A0:73:B7:84:C1:DF:61:93:17:CD:16:B7:29:06:20:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.144.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:d1:53:18:a3:bb:57:f2:07:f1:90:65:dc:3d:9f:b6:9b:
         f6:85:2d:09:11:1a:11:14:13:28:98:a0:37:84:9a:a4:b8:dd:
         50:53:28:5c:7f:6c:0e:33:ab:9b:56:41:c1:5a:ab:42:36:cd:
         50:a9:10:e4:65:08:dc:3a:1f:44:f9:63:51:41:02:73:27:15:
         36:20:f8:cb:8c:63:b8:b5:ed:7c:dc:76:47:3b:49:69:7f:ff:
         bb:09:c8:01:85:72:96:f7:66:47:b9:0a:df:75:16:53:2a:eb:
         ea:86:b3:51:ea:27:59:1a:00:97:22:41:44:e6:90:30:b9:cf:
         33:c2:7f:1c:cc:11:e1:87:00:b3:0b:7d:e9:7f:34:00:d2:e5:
         ef:b8:5a:ac:44:be:8a:5d:73:48:9c:1b:53:f9:5e:bf:e3:a4:
         86:5b:63:de:0c:0b:6e:5d:d8:89:a8:93:b0:6f:c8:70:a8:05:
         39:e8:8e:dd:4a:51:70:ae:15:ad:83:9a:3d:04:46:a0:b3:c5:
         05:29:7b:c1:62:5d:fc:ad:42:47:c3:f8:12:cb:a3:b4:c0:ec:
         65:7d:62:b4:e8:d7:72:e7:67:9b:23:da:a0:2f:5f:7b:2f:d1:
         41:90:57:b0:e2:80:4a:09:74:b9:4b:23:35:f8:9a:3d:12:ac:
         d5:46:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:24:20 2025 by rpki-client