Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa
File:                     c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa (raw, json)
Hash identifier:          iFhxO+CikHsl9/PCwc5GkgvV3DQII6I+CssiD8fQ3QU=
Subject key identifier:   BA:31:38:45:AC:7D:19:5E:12:85:FC:72:5D:31:2F:34:7D:C4:AD:61
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584A5765D340F83325018BA4D880
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     399244
IP address blocks:        170.205.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d3:40:f8:33:25:01:8b:a4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=d1c3ab25-cb26-4e95-968b-4b3a1fd89e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:d7:92:fe:3c:5a:87:c0:1b:7a:ba:74:fc:
                    8c:25:36:fe:ec:66:17:70:b7:1b:63:7f:6c:18:7e:
                    f1:47:00:a6:e0:1d:49:f1:54:57:9c:04:3a:6d:19:
                    2d:0d:26:7e:42:e0:c9:da:58:16:1b:d2:c3:ae:9f:
                    b7:70:1d:dc:5a:9d:d6:26:44:7e:a7:4f:fb:a7:c0:
                    8a:17:ef:4f:82:65:01:a5:dc:0a:f5:56:8e:a7:2f:
                    4a:1b:26:b1:45:42:13:f2:27:41:5d:12:dd:46:23:
                    c9:2e:24:8d:00:75:13:dd:fd:5c:6b:89:94:50:b8:
                    99:47:a1:35:07:e0:f5:12:13:80:dc:67:2e:05:81:
                    4d:25:1a:82:f8:e2:56:f8:6f:1e:c9:e2:80:e4:68:
                    90:f7:19:df:e4:27:90:76:0b:06:01:5d:f5:76:5f:
                    ff:44:5b:7e:b3:bd:fe:c6:2f:81:d0:be:3b:7b:c1:
                    dc:9e:86:2b:f3:8e:30:fb:c2:15:13:64:40:66:f8:
                    22:66:0e:1f:8f:b4:4c:42:f0:20:d3:49:ac:5f:a3:
                    e8:39:cf:7a:b0:07:09:30:fd:b6:71:44:e9:d8:be:
                    e7:33:db:9f:d1:f8:44:ff:fd:3b:d6:29:79:ea:55:
                    35:74:b1:6e:35:8e:ec:f1:5d:bb:21:8f:14:c9:df:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:31:38:45:AC:7D:19:5E:12:85:FC:72:5D:31:2F:34:7D:C4:AD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:b2:e2:f3:08:f2:bf:7b:bc:5b:54:ec:15:88:a9:53:70:
         09:22:1d:7c:89:cb:7e:b2:53:b6:7d:ae:b9:f7:db:8d:6d:38:
         31:58:ee:74:4a:22:65:40:fb:06:aa:c0:fb:72:b2:bf:79:29:
         87:b8:ab:62:3f:68:b4:b6:9e:a5:70:85:6d:c1:b1:4d:d7:bd:
         43:c6:27:91:e4:e1:64:a0:c3:ab:bb:01:60:11:72:5d:0b:6a:
         b2:e9:8b:c0:bf:97:05:ae:c8:7c:1a:5c:4d:3d:54:5a:87:17:
         c6:ab:a7:ff:76:49:b4:ce:9f:3b:a1:ea:8c:f3:fe:43:2c:73:
         7d:b6:00:3d:26:df:d5:94:eb:9c:9c:dc:69:66:7c:79:c7:b8:
         83:ee:b7:ec:ef:95:d0:9f:3f:3a:7a:ab:e7:d7:88:8f:e0:0c:
         9e:6f:6b:47:b6:2f:f7:26:51:fc:2e:a0:b4:09:04:d6:0e:c5:
         f2:d0:99:b5:d5:fc:29:64:6c:9e:81:56:e3:2a:b1:00:f5:e4:
         08:04:e1:da:e1:b0:fc:fd:c5:6f:5d:10:84:c5:1b:1e:9b:4d:
         d9:a8:8e:e9:d5:29:37:0e:7c:ec:5a:25:9e:8b:a5:b9:60:d9:
         73:4b:55:84:09:a9:d9:ac:72:dc:d2:2d:8e:40:b5:62:ba:cd:
         1b:fe:41:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:25:46 2025 by rpki-client