Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa
File:                     0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa (raw, json)
Hash identifier:          Qvci9EAI3SV1Klyiy4aYiADi1pcK01R34L1ZcjSy1JI=
Subject key identifier:   63:15:55:F2:5A:70:D1:F9:68:61:1E:5F:51:24:46:21:ED:99:99:84
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F4328584A3A157406A8DF0DD03400A040
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     31859
IP address blocks:        208.180.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:74:06:a8:df:0d:d0:34:00:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=8e6fe8bf-2b7f-446c-8ea8-22cbf27775e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:31:3d:57:0c:94:f9:6d:e2:43:d1:29:25:
                    d3:75:34:67:34:99:09:be:96:a2:66:1d:e5:50:73:
                    90:dd:b0:49:b6:73:d2:9c:30:31:5d:8a:eb:d8:8e:
                    e9:a7:02:aa:ad:17:fd:21:43:cf:5a:4e:fd:7b:f2:
                    3e:95:e1:11:7c:d1:e2:76:16:41:de:5a:05:48:93:
                    70:f0:0f:cb:28:53:30:c4:6a:47:2f:3b:87:0b:3b:
                    4e:c8:11:60:f2:47:bc:17:cd:25:bd:15:9c:53:ad:
                    87:c8:09:28:f8:a9:2f:22:d2:cd:eb:87:00:db:e2:
                    3c:bc:68:a8:3f:f4:f4:3e:87:3e:10:32:99:d7:1e:
                    76:7d:3e:82:26:1a:d4:14:de:db:9b:02:ef:3f:ee:
                    ce:52:ff:55:79:d8:a5:3f:65:9d:28:72:f9:f4:3c:
                    4e:c8:d7:03:3b:cf:79:70:aa:84:7c:c7:60:13:6e:
                    b1:cb:08:fe:4c:77:31:05:29:a1:8f:3a:6a:34:15:
                    0f:15:40:16:d8:ab:60:bd:a0:55:08:20:cf:47:25:
                    ee:ff:46:1d:22:84:e4:03:94:b5:62:60:07:c3:e7:
                    9a:53:94:42:95:82:60:19:67:77:2e:96:7a:e1:13:
                    d8:a7:d7:89:38:17:e5:9d:03:1a:eb:23:f2:6b:36:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:15:55:F2:5A:70:D1:F9:68:61:1E:5F:51:24:46:21:ED:99:99:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.180.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:74:4c:ee:f0:ab:e4:da:8e:61:0c:a2:c8:c9:f2:91:d4:
         83:62:56:1c:7a:55:6f:1d:94:d9:9a:f3:56:aa:4f:2e:a5:45:
         95:95:12:95:11:1c:d5:3f:7f:9d:5e:1c:0f:03:ad:00:1c:05:
         8f:c3:ff:22:ac:3d:b8:a6:68:6e:a4:9c:b0:b8:a2:40:ae:ae:
         76:cc:2f:cc:b2:e3:8b:8f:4b:f8:0b:9e:c2:2b:e8:b7:34:45:
         37:c2:b6:f6:ee:f8:71:05:f1:77:27:c8:f5:a3:f7:61:78:aa:
         72:aa:6c:e8:1f:e9:99:44:9e:43:fe:e7:fe:05:fa:fb:ee:02:
         23:fd:b5:d9:e8:79:28:b2:05:6e:6e:49:3a:d5:4b:ef:92:4f:
         e4:ae:bf:d4:d7:0f:55:1f:24:83:d0:95:b5:23:20:cb:1a:ec:
         d9:9f:48:aa:f5:b4:22:da:e8:25:54:a3:27:c0:0f:56:80:93:
         bf:fd:76:c3:75:b3:5a:81:28:77:22:ab:9b:45:47:eb:a1:a5:
         3c:51:b2:5e:0d:39:ae:6d:97:b3:64:47:00:ec:32:91:eb:93:
         e2:29:c1:ef:3d:5e:97:66:08:d7:8d:9b:a2:ef:24:86:f2:da:
         ad:d1:08:a4:24:0f:ff:3f:1e:12:2f:59:20:31:00:77:74:cd:
         f1:28:0c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:23:43 2025 by rpki-client