Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/acd7eb49-87a6-309d-84cf-ea0601142d79.roa
File:                     acd7eb49-87a6-309d-84cf-ea0601142d79.roa (raw, json)
Hash identifier:          vTd/asqZuRC2FrS5oWdZjZGB7Bz0d8j3bTAbv5oNFdg=
Subject key identifier:   68:4C:C1:45:B5:89:24:EF:23:9B:C6:49:FD:29:D6:30:FC:0F:D9:40
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F432858499294A2508641A498552E2380
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/acd7eb49-87a6-309d-84cf-ea0601142d79.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     19886
IP address blocks:        171.162.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a2:50:86:41:a4:98:55:2e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=8925a779-e6c7-4524-8f15-1e6777e15b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:4c:72:4d:db:89:26:46:91:ce:db:b8:a1:
                    9f:4a:7f:dc:c7:e8:26:65:a2:4c:eb:c0:e7:06:0a:
                    11:ce:2f:a4:25:2a:6b:b0:ab:3b:40:ec:73:13:25:
                    c6:99:56:16:6d:f4:d5:03:93:a9:87:12:f7:bd:db:
                    54:aa:2d:e2:c1:c2:a1:fe:52:e4:db:12:3d:c1:0e:
                    25:a6:1e:f6:22:1a:d5:d6:02:16:ed:17:f2:54:17:
                    93:d9:47:d0:72:fd:ea:a3:18:71:67:21:11:db:d7:
                    2d:ad:9b:78:7d:5d:46:b4:a1:4f:50:35:cf:ea:d4:
                    3d:9e:96:e5:10:e2:8c:a1:c7:91:89:6e:e1:86:cf:
                    95:d3:cd:f3:6d:7d:fa:6c:b2:a3:65:44:a3:d7:13:
                    ca:bc:0f:66:a4:cd:76:0f:23:c5:41:50:25:98:9f:
                    40:0a:4d:38:67:c2:56:10:4f:45:f2:41:b2:c4:0e:
                    31:c6:ed:4c:69:94:d8:75:ea:fb:fa:86:71:b6:e4:
                    07:91:f6:65:8b:a4:11:c4:2b:54:1e:65:b1:85:45:
                    2a:dd:26:0f:e3:2c:e5:cb:44:96:f0:e6:51:d9:b0:
                    86:d9:ea:e9:97:39:b2:e4:17:87:01:b2:a5:35:44:
                    b9:07:70:8b:19:9c:df:c9:e6:a4:d3:09:97:01:b4:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4C:C1:45:B5:89:24:EF:23:9B:C6:49:FD:29:D6:30:FC:0F:D9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/acd7eb49-87a6-309d-84cf-ea0601142d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:f7:4c:b2:9d:65:4c:11:f5:b5:71:2c:60:e8:d5:9c:61:
         34:b4:93:3c:f7:43:7c:6a:88:e6:f7:a2:83:fc:04:3e:c9:e5:
         cd:58:2c:a8:91:ef:73:b3:50:98:03:f5:4f:8d:7b:dd:8c:e0:
         d3:35:ae:f5:7c:b7:30:58:53:16:c3:b4:5f:9b:80:f1:0a:ae:
         09:e5:ab:22:d3:05:1c:ec:74:90:db:64:07:f9:95:42:3b:9a:
         ef:72:a5:5a:93:88:b4:ce:7e:f2:24:08:03:7c:ba:59:f8:fb:
         b4:a3:ea:43:b8:9d:26:eb:89:b6:77:16:7c:5e:4e:87:fb:53:
         68:ad:a7:36:79:bc:46:10:78:0b:0b:75:4b:29:bd:3a:41:f2:
         f7:bb:cb:55:d8:a9:b7:4d:a1:db:19:e3:98:ed:24:71:45:a5:
         98:2c:c2:00:8f:58:e5:d3:50:a2:14:b1:95:b5:67:ee:f0:43:
         5f:31:bd:84:8c:d1:a2:73:92:0d:e3:33:23:4c:0c:e1:12:89:
         83:a7:53:f8:56:af:4d:3e:da:2a:4b:6d:5a:86:ef:dd:82:e6:
         46:1e:f5:0a:0d:24:7d:74:15:6e:e6:8a:b0:ad:b6:3a:29:9c:
         04:b1:3b:0d:19:5b:f2:24:78:03:de:90:54:cc:8f:23:4a:6d:
         c7:b1:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:58:48 2025 by rpki-client