Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa
File:                     91539a9a-9578-35fe-bac3-9397f6a439d5.roa (raw, json)
Hash identifier:          9/TGpo742NdC0nHRD2irlY2bNrfL92Y8GCsYe+vaeRk=
Subject key identifier:   B4:B2:F1:FF:65:9C:00:B2:E2:F7:8D:32:E9:A0:F4:8D:E1:F5:27:EF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A5FC5E8D7404ADAA66F00AEE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     7040
IP address blocks:        172.94.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e8:d7:40:4a:da:a6:6f:00:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=fc92b28f-4fbe-4f9e-8a5f-fa5cb129ec4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:17:9d:ff:69:9e:7f:60:63:65:0d:1a:f6:
                    81:5b:f0:77:2a:54:3a:49:31:50:50:12:6a:63:6d:
                    14:7d:83:5f:74:83:81:c7:e4:94:d2:db:9f:7b:43:
                    8e:74:80:d4:c1:fb:9b:c2:e2:81:26:d2:ec:e1:3a:
                    bb:5f:23:3a:38:ba:e5:0f:88:2d:5d:73:e7:a4:36:
                    10:9d:dc:63:22:70:0e:cf:a8:54:f3:82:97:7b:44:
                    50:22:bf:ef:f5:92:a7:64:7b:c6:9c:d5:7c:1a:d3:
                    c9:a9:80:8e:a2:fb:c4:6e:5e:5d:e2:68:d8:b0:a7:
                    8d:c7:27:73:53:99:1c:80:c4:cf:e4:95:99:76:a7:
                    db:78:a3:1d:02:5e:6c:8f:bd:20:37:87:de:10:0d:
                    26:7f:01:2e:60:26:e9:84:d7:0e:7f:b3:d2:2b:79:
                    42:3e:3b:a4:ab:41:90:57:47:e2:f7:5a:73:ac:6e:
                    fb:e5:1c:de:0f:7a:5a:9d:5e:23:5c:c3:17:de:40:
                    7a:d9:dc:ff:25:ca:2e:3d:57:2f:65:ad:fc:67:cb:
                    a2:3c:ae:bf:e2:f6:8f:b6:d7:20:b8:c0:0e:e9:f0:
                    5b:15:ab:ca:96:cb:a4:b8:da:59:e3:ff:ba:68:6d:
                    65:e4:7f:bc:0e:bf:89:14:da:93:01:75:58:d1:9f:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B2:F1:FF:65:9C:00:B2:E2:F7:8D:32:E9:A0:F4:8D:E1:F5:27:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:8a:dc:fe:a7:a4:e1:aa:7c:a7:17:2f:f5:a2:cb:ac:0b:
         12:58:d8:32:a6:1c:54:31:85:8e:f5:76:bc:ee:20:61:b4:f8:
         87:4f:d8:5b:65:dc:7e:30:d5:ed:e7:e3:b0:e4:40:a7:fb:18:
         21:30:9b:83:68:72:ad:b4:d2:f3:fa:40:ae:34:ef:3c:41:7f:
         3d:73:19:b5:d4:ac:85:69:48:10:83:8f:4e:8b:7b:b3:0d:ed:
         73:b1:49:f0:34:f0:06:c4:e9:40:c3:cc:69:19:6e:22:f0:a2:
         1a:e5:de:a1:f6:85:9d:16:df:da:07:cd:63:c4:59:3a:5b:b5:
         a7:09:fe:d8:b5:d6:1c:15:43:18:90:b3:b6:f6:c0:cd:f6:c5:
         fd:13:88:2e:f3:d5:59:79:40:d2:1b:7c:41:99:c5:db:57:28:
         93:83:aa:92:70:66:61:a4:e5:cd:a9:7a:f3:64:72:93:a2:79:
         70:52:86:02:04:55:f8:07:69:42:d1:57:e4:66:8a:7f:a2:5c:
         ac:86:7b:3f:01:6e:1b:db:14:5f:91:c6:e4:e0:d6:3c:94:1b:
         c5:ea:e5:7d:b2:55:0e:7e:5c:b0:fa:0d:9e:39:a4:23:0f:a8:
         84:1e:94:83:af:aa:44:83:91:df:97:1e:9d:b6:3d:0c:0d:43:
         e8:9b:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:51:19 2025 by rpki-client