Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/627aeba5-a4ee-3f18-b13b-f20d60b0da02.roa
File:                     627aeba5-a4ee-3f18-b13b-f20d60b0da02.roa (raw, json)
Hash identifier:          HaySM4YI++j3TQG6aS5YqPxC5o+mPmeqgf3nYqLP7ac=
Subject key identifier:   45:A7:5C:F7:DD:94:AF:62:40:34:1A:11:09:A8:86:1F:2E:0F:C4:6E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A55130A645072CE4EE9677C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/627aeba5-a4ee-3f18-b13b-f20d60b0da02.roa
Signing time:             Fri 27 Jun 2025 17:02:50 +0000
ROA not before:           Fri 27 Jun 2025 17:02:50 +0000
ROA not after:            Thu 25 Sep 2025 17:02:50 +0000
asID:                     7018
IP address blocks:        142.111.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:13:0a:64:50:72:ce:4e:e9:67:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 27 17:02:50 2025 GMT
            Not After : Sep 25 17:02:50 2025 GMT
        Subject: CN=d3ab0410-da05-4ecb-aa38-d6e7d5ddbf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:40:1d:f6:04:be:89:f1:66:d8:a2:61:06:
                    70:4a:1d:76:67:2e:ea:7b:c5:55:c1:43:59:6a:a2:
                    c7:97:8b:b0:fa:90:6a:e7:64:cb:c5:c1:f3:4a:10:
                    41:02:a6:a8:d6:f9:9d:54:99:9d:88:ce:f3:5b:af:
                    57:24:84:54:d1:64:8a:4f:6e:bb:3d:c6:2a:a7:17:
                    36:2a:9a:38:18:22:fe:c9:fe:5c:f4:9f:e0:45:8a:
                    7b:e9:96:4a:84:a8:43:49:f5:ba:b1:75:02:97:41:
                    1f:91:b4:a1:bd:bc:61:6e:a0:b0:29:e5:86:30:ac:
                    7d:40:23:7a:7f:68:11:e8:ca:49:01:9d:e2:a3:cc:
                    5b:ac:cb:82:57:6c:64:82:4e:22:26:4e:b5:fc:d3:
                    dc:12:df:ba:56:08:8a:b8:30:bb:5a:5d:62:e3:6b:
                    2a:54:21:c6:1b:17:15:64:3b:05:cb:fa:9f:fa:bf:
                    9d:8a:90:6e:de:d1:3b:02:17:14:e5:14:bc:6b:12:
                    7f:b7:cc:7c:5b:f7:84:af:f5:85:82:aa:cd:08:6f:
                    6a:d6:1e:3d:7c:9e:e6:ac:5d:b1:23:57:20:6d:37:
                    5d:f1:8a:96:4e:3e:6a:2e:f8:1b:9b:81:dc:e6:46:
                    12:b4:b1:37:1f:b9:0e:41:11:d7:eb:84:d4:4b:44:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:5C:F7:DD:94:AF:62:40:34:1A:11:09:A8:86:1F:2E:0F:C4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/627aeba5-a4ee-3f18-b13b-f20d60b0da02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:2e:de:35:49:31:a9:b9:91:53:3e:b9:8c:c4:1d:23:19:
         34:70:9c:15:12:b7:c9:4e:9d:9a:87:b1:a2:e2:05:65:0e:26:
         8b:58:f6:c3:7a:c6:4c:18:29:ca:0b:df:aa:bf:33:dc:74:d7:
         1a:d8:80:fa:e1:5d:d6:ed:d1:eb:7e:ca:4b:df:cd:eb:e5:0e:
         c6:f3:da:b4:8d:a4:8e:cc:f5:69:e1:c0:d6:51:18:e6:37:21:
         15:6e:84:fe:b3:38:68:eb:a6:7b:ca:df:a7:7d:34:78:90:51:
         ff:49:7a:db:26:55:27:90:bb:fe:b7:20:7a:04:33:56:9e:15:
         03:97:62:58:b5:80:70:5d:6c:14:8a:44:0b:9d:23:f3:05:f1:
         59:96:a4:56:38:de:d8:90:d4:3e:d7:d3:b6:93:09:7a:de:53:
         0f:34:47:3a:7c:ca:e9:c9:ee:12:8c:e3:ea:a2:ab:88:10:dc:
         60:dd:4f:2a:76:80:4b:1c:44:f2:76:27:f6:d4:22:74:ca:44:
         0e:77:20:10:9a:e0:d7:29:5d:51:95:8b:1d:05:37:68:e5:6a:
         13:98:d3:3e:46:0f:e8:e7:af:04:96:33:fb:ca:8a:fc:1f:e8:
         bb:bf:e0:08:4d:93:dc:a9:e3:7a:af:2d:35:66:14:1c:36:8c:
         9e:c9:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:19:40 2025 by rpki-client