Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
File:                     d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa (raw, json)
Hash identifier:          4s3T18Ijk1nhOWpGrxeiXuma/emaKmkXrhCLI2c4arQ=
Subject key identifier:   07:09:59:32:E0:26:AD:7D:FE:A8:E8:4F:9B:85:C0:DA:F0:73:13:07
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584ADD6671FC82280895C138CAC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     2914
IP address blocks:        129.250.63.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:71:fc:82:28:08:95:c1:38:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=48ca60d1-6b3f-4250-a3a3-43621ffd400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:10:32:dd:f4:e2:d1:3b:4b:cf:49:a0:f8:
                    26:65:b3:32:2a:4d:e4:9e:26:d0:1d:af:9a:52:8e:
                    fd:9f:72:2e:45:2d:ac:5e:75:03:6a:a9:9b:8d:de:
                    5d:68:c0:6d:22:c7:a3:dd:83:6d:ce:ef:ef:39:77:
                    d0:02:41:d9:d4:5e:46:88:8d:65:1d:cd:cd:5d:ca:
                    e5:20:ee:11:94:4a:6b:96:fc:1b:f3:ca:42:74:ec:
                    11:e1:77:6c:28:a4:f2:1c:8a:a2:da:00:71:68:9a:
                    ac:3d:87:97:41:8c:94:ad:a0:31:d2:f9:aa:36:1a:
                    5d:20:c2:db:74:cc:ed:01:51:5c:39:12:95:90:34:
                    2c:56:93:6a:cb:73:72:68:1b:8b:20:90:93:5e:17:
                    71:2d:e5:bb:29:0e:05:f7:46:28:da:86:c5:58:70:
                    f0:b0:75:94:67:d8:f1:f2:b8:58:eb:c4:3c:b4:ad:
                    51:1c:b6:97:78:3e:36:dc:fa:23:1d:64:47:da:f5:
                    f2:c6:9e:a4:54:2b:10:e1:ce:8e:a7:58:c9:c2:72:
                    8b:3a:45:55:4a:bd:62:83:52:90:d9:e5:3e:f1:d8:
                    d4:fe:42:b8:a1:71:d1:a0:fd:7e:3c:d4:52:73:96:
                    db:e3:ad:50:26:a6:f8:79:83:c2:be:52:87:0f:17:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:59:32:E0:26:AD:7D:FE:A8:E8:4F:9B:85:C0:DA:F0:73:13:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:a0:c4:cb:f4:c6:d9:96:a8:f4:2a:66:ad:f3:ff:36:b0:
         9b:79:4c:53:74:f2:0b:29:d3:b7:0d:9b:79:36:e6:ee:18:8c:
         46:26:b8:63:40:6c:a8:2c:76:e1:d7:fb:32:a2:99:28:35:5a:
         16:ed:3f:2c:d8:a6:ef:3e:77:23:ef:3c:3b:45:70:61:bd:c8:
         d4:3e:fd:de:d9:31:e4:fe:06:08:a7:3d:4e:d5:5c:ac:7c:47:
         af:ea:9e:b5:8b:d6:10:1f:cc:a3:0d:dd:92:26:e3:4b:ac:bd:
         c7:3c:f9:fd:df:12:0e:93:66:0f:b2:91:25:0b:cc:e7:dc:73:
         7d:ca:8e:7a:af:92:33:3f:8f:a5:55:b4:3c:32:6b:17:5c:ff:
         ea:bf:d8:25:b0:68:43:9f:30:ff:45:ca:9a:8d:f5:85:de:7a:
         d9:f4:c2:89:da:89:28:41:7f:8b:2b:b0:21:83:a7:85:04:08:
         42:a8:b1:ce:f9:05:05:a1:72:51:78:dc:10:ca:e4:1f:06:96:
         5f:18:e7:0e:8f:d5:86:6b:fa:3e:82:28:eb:4e:f3:53:9c:e6:
         e3:5c:11:9f:1f:02:a0:18:be:f2:bf:28:99:d4:6b:46:2d:61:
         63:d6:84:0b:75:33:4f:3a:18:33:18:13:46:04:e3:e7:78:51:
         3e:e8:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:55 2025 by rpki-client