Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa
File:                     d00cb053-7fdd-3738-987c-4166b9a7f33c.roa (raw, json)
Hash identifier:          F6DgsXfny/v4Rw+Jpv7bAQR/G0vD8qbN1DYcfQjnYXg=
Subject key identifier:   3C:78:4F:32:2D:20:5C:D4:59:82:24:0A:CD:ED:BC:43:03:AD:50:0D
Certificate issuer:       /CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
Certificate serial:       010D0C9F4328584A5765D48377577BAC562B319E
Authority key identifier: EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     40138
IP address blocks:        198.72.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d4:83:77:57:7b:ac:56:2b:31:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=bde3ee88-ae2f-4600-849a-d1549133ac78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:6a:42:0f:36:35:f1:c3:94:93:67:2e:32:
                    b9:b5:59:ca:22:63:76:d7:7c:61:73:d1:d9:8e:1e:
                    92:4d:28:25:41:bf:5f:41:ab:c6:45:3d:07:b7:d9:
                    10:ec:c0:03:79:33:49:0b:37:a7:8b:cf:3a:69:01:
                    f3:e5:e6:95:a1:b8:68:e0:96:cf:fb:c5:55:67:50:
                    6b:1d:70:c7:c7:5d:b5:73:a6:e3:2b:21:95:a5:21:
                    6d:1b:1c:a1:d3:d1:f5:30:fb:d8:af:25:0d:ca:dc:
                    f3:d9:f5:27:28:54:82:e5:9f:a0:c2:07:c0:92:35:
                    04:e5:d2:fa:fa:ad:62:51:11:f0:4e:19:e2:13:97:
                    f5:81:57:be:37:d2:75:27:93:34:8f:f8:4d:fc:d3:
                    54:bd:3f:af:e0:37:ed:12:7f:70:e9:24:e3:10:a0:
                    40:c7:c4:28:34:4e:05:f7:68:2e:70:20:20:13:48:
                    9d:98:77:48:bd:59:a0:d8:62:56:8b:20:7e:26:7e:
                    bb:c3:10:4c:51:50:a2:3a:8a:f3:47:b9:4c:e1:60:
                    2e:d9:7f:91:64:95:e6:fd:d1:ae:4e:19:3b:25:38:
                    fa:3e:eb:21:8b:5e:fb:a6:e2:92:56:d2:bb:4f:c3:
                    dc:b5:bc:54:65:ee:8c:e9:ef:97:f6:75:50:47:24:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:4F:32:2D:20:5C:D4:59:82:24:0A:CD:ED:BC:43:03:AD:50:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl

            X509v3 Authority Key Identifier:
                keyid:EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.72.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:42:bf:d7:15:75:8b:b4:cd:6c:70:91:16:7b:00:e4:d6:ee:
         12:57:15:72:b6:5a:5e:0d:e8:c0:8a:28:6e:5f:32:ca:a1:4c:
         5c:11:d5:59:6b:c5:b3:a4:d0:4e:bb:f3:96:9d:63:fd:61:4a:
         8f:47:a4:9c:70:53:de:4c:fe:b6:c1:d8:67:89:e7:44:af:ff:
         92:8a:10:7c:64:42:5d:30:56:0e:a1:1c:08:b2:2c:8f:69:a0:
         1b:18:d9:d3:79:f4:d8:0f:de:ed:13:4f:07:70:a5:3c:b7:08:
         0d:d3:4d:9f:96:af:f0:4f:67:68:54:92:82:c1:80:57:d7:7e:
         63:84:5f:0d:42:2b:f2:2b:65:3f:75:0a:ad:9d:4b:62:0a:d0:
         9b:13:c4:9c:3d:b1:d4:9e:fb:d7:54:09:14:38:63:50:66:11:
         cd:6b:a4:63:5b:1b:e9:00:6f:b2:b9:a2:aa:bd:a1:80:6f:5e:
         28:12:97:b6:df:69:0f:a0:0b:8e:0f:ad:7b:03:15:1f:97:3d:
         aa:b1:f3:44:a4:69:f2:da:05:83:d0:14:5e:23:4c:a9:c9:d8:
         38:88:3b:3b:7e:4b:f3:23:25:b7:ae:c2:2a:86:66:77:22:20:
         e3:b0:25:cc:c7:f4:02:45:76:3c:60:e1:df:ba:38:4a:8f:46:
         26:61:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:10:47 2025 by rpki-client