Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
File:                     041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa (raw, json)
Hash identifier:          LbM6ChvpnrkAIt9IS201pzVIYcN2odZOzWgyIGzZoNk=
Subject key identifier:   2A:BA:28:A3:7C:E5:46:34:81:4E:21:4F:D3:AC:87:0F:70:64:A4:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AD3A1236651751E175D4264C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     7342
IP address blocks:        209.131.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:23:66:51:75:1e:17:5d:42:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=20f94f07-c0c6-4965-91d1-94a90daad947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:63:4d:64:e5:77:7a:15:08:b4:eb:32:dd:
                    7a:87:03:6e:57:d3:0d:dc:62:e7:30:e5:af:c9:9b:
                    98:57:c3:09:c2:a4:e0:01:84:75:c3:ab:70:ed:81:
                    09:ce:7c:75:b5:4b:b7:2e:50:18:e0:8e:36:00:12:
                    d3:16:14:f2:d5:71:be:9d:08:cb:68:45:c9:6f:34:
                    cc:d2:7f:36:37:ae:3f:98:19:9d:ac:9e:84:e9:b7:
                    dd:69:3b:51:28:b6:68:57:f6:db:f4:dc:e4:90:0e:
                    22:f9:47:1e:d1:68:64:35:8f:54:4e:00:33:7a:9e:
                    c0:30:a8:a5:28:3c:79:b9:8c:d7:97:59:64:97:70:
                    f1:39:c2:80:ad:a0:84:ae:7f:fa:0e:d4:0b:6b:a9:
                    8d:72:be:f4:5d:ca:c6:3e:66:62:a6:90:3a:be:12:
                    05:24:7e:7e:f6:f1:54:89:67:7c:94:72:01:b9:bc:
                    de:b4:3e:b0:96:12:eb:01:53:c3:cf:9e:b4:f0:3b:
                    5d:46:cc:d4:6a:50:32:99:c5:97:a4:f2:66:f7:fe:
                    b1:77:5f:57:5d:21:9c:a3:1d:cd:9c:44:89:c7:d3:
                    84:fb:15:b5:f6:bb:6c:ac:4a:bc:b3:fa:d8:42:7c:
                    bc:05:a1:8c:f3:07:3b:98:e0:5c:8b:ce:e4:b1:b9:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BA:28:A3:7C:E5:46:34:81:4E:21:4F:D3:AC:87:0F:70:64:A4:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:69:4c:3e:a8:5a:38:24:3b:1c:d6:b1:0c:e9:4e:e6:dd:99:
         97:d7:9d:72:c7:e2:df:77:a7:5b:2d:54:64:3b:fc:35:ca:ac:
         f4:71:72:6d:ba:56:10:9e:51:04:ce:1f:80:ee:db:98:a7:d5:
         92:a3:02:f4:b0:76:27:e8:69:b1:b9:bc:8d:95:53:27:c6:e8:
         d2:21:6b:69:55:09:a8:98:fb:b2:e2:3f:fc:9f:92:72:93:bf:
         4f:2f:80:9e:68:af:30:ca:db:88:44:03:05:02:07:c5:fc:03:
         0e:68:b8:1c:6f:1d:23:40:1e:e4:76:2f:9e:f6:a2:46:8f:6f:
         dc:b0:b9:6e:0a:65:41:7d:89:e5:b2:b0:7a:e8:4c:af:5a:9d:
         dc:63:40:18:7d:47:63:f8:8b:59:10:fe:8c:59:48:12:0f:8e:
         c8:b6:f1:7f:32:81:bc:d1:62:cc:d7:a1:52:7c:5c:55:82:2c:
         ca:24:52:46:d0:23:16:d2:f5:01:f3:a2:8f:7b:c2:38:15:5e:
         01:5a:59:d6:a3:c3:a0:c9:8e:c5:8f:ce:28:0f:6e:70:5f:fd:
         07:5d:e1:6e:6e:37:f7:89:17:f7:5c:f5:bb:5a:65:7a:c4:fc:
         1e:46:eb:76:7d:36:7f:6a:85:28:dc:07:a8:f4:64:d0:d9:29:
         3d:a7:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:03:44 2025 by rpki-client