Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
File:                     17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa (raw, json)
Hash identifier:          nY2p8YrT05NMhLY4ufYbyYpmnr77kmh+QCFmrFBH2BY=
Subject key identifier:   7D:15:08:83:60:B7:BE:F6:9A:47:04:E5:39:B4:FA:6C:43:ED:D1:C9
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584AECC1400F9394D2DBF6FF6880
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     8796
IP address blocks:        104.143.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:40:0f:93:94:d2:db:f6:ff:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=42d1126c-6116-4ba8-8f23-160675b4ba9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:15:cf:b7:84:97:14:56:19:07:c7:c0:21:
                    f7:6c:b6:18:4f:4d:32:4b:d0:d5:82:fb:bf:96:66:
                    b3:11:a0:9a:19:69:78:13:f0:88:d8:92:a5:60:02:
                    50:53:d2:03:d5:d6:f0:af:92:5d:63:0b:e8:71:1b:
                    f8:50:9a:65:8c:5c:e0:18:02:56:08:a6:82:54:e9:
                    09:4f:74:bb:13:09:cf:e8:16:9e:2e:fa:2c:1f:71:
                    5f:d5:7e:e2:43:f5:f6:3b:05:57:ba:ea:4c:fd:77:
                    fe:44:22:1c:05:7d:f1:fe:9b:ad:27:2f:7a:bd:fa:
                    6c:28:0b:4e:54:df:39:dd:8e:71:61:93:cc:0a:17:
                    cf:08:27:e0:5e:96:bf:06:41:24:f8:e6:82:08:ee:
                    86:9e:f4:75:00:57:7a:71:bb:54:15:fc:9e:9e:f1:
                    ef:4b:90:c8:be:1a:38:f8:da:fb:c3:a1:cc:91:45:
                    b7:9a:95:2c:69:2b:c2:85:f4:5e:cf:54:92:0b:c0:
                    99:45:a7:ce:83:37:36:c8:fa:86:88:cf:4f:55:6c:
                    07:04:36:ac:87:aa:f2:a4:06:01:a8:31:14:d1:63:
                    1e:7e:73:fe:70:5a:2e:3e:46:03:28:42:b5:bb:d0:
                    03:4d:27:38:ef:8e:12:2d:9c:f9:09:e3:9e:22:aa:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:08:83:60:B7:BE:F6:9A:47:04:E5:39:B4:FA:6C:43:ED:D1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:0f:9e:88:4e:d4:47:da:85:95:f9:00:1a:27:38:d9:3a:
         77:28:12:44:19:73:8b:0c:59:28:0e:62:fe:78:32:43:5f:3c:
         1d:d7:c0:13:8e:03:89:31:de:d8:d0:32:ef:92:cc:f4:ef:b9:
         32:51:18:1e:c3:ed:4f:1f:a2:99:c4:07:f0:c5:7c:85:30:21:
         04:38:5d:c0:80:4c:4d:3f:da:6d:c0:62:f2:45:1e:f2:25:c1:
         de:49:eb:37:9f:65:80:eb:bc:fe:4f:ba:b1:93:dc:16:ac:06:
         ce:90:b4:16:7e:10:c5:dd:47:8b:6b:66:6d:f4:81:69:30:50:
         77:97:99:f9:09:24:ab:0c:d1:13:d6:81:51:e2:7c:83:ba:b0:
         d8:e6:4c:7f:b1:71:11:4e:31:2d:64:d0:00:51:58:ac:d0:d6:
         86:3d:6b:df:d6:69:41:4e:d9:59:7f:0d:67:b1:29:d4:fb:f8:
         34:d6:30:93:c6:4c:1a:29:b5:a3:19:65:74:84:6c:70:a4:41:
         a0:ec:cd:e1:e6:b0:7e:04:b6:87:d3:45:61:eb:49:cc:de:15:
         90:e0:65:f3:1a:c5:ba:1a:b9:e8:47:4e:e5:98:bc:07:56:9a:
         93:4d:0a:ef:38:58:81:51:6a:a3:22:f9:d9:8f:d7:87:b9:3d:
         6d:52:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:20:16 2025 by rpki-client