Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa
File:                     f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa (raw, json)
Hash identifier:          j0j99LgKl/LIyOdxgQICSKftjc90o8celPykebvZTgM=
Subject key identifier:   05:93:1A:3E:68:69:BF:0C:1D:35:E8:9F:49:10:3D:B4:6E:3F:19:AC
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584ACF70FDEDC07B30C9504B6C40
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13506
IP address blocks:        166.123.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fd:ed:c0:7b:30:c9:50:4b:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=8e6e3047-9b8c-4de2-98d4-b2cb8372d79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:3f:e1:f7:20:33:a3:68:21:b1:cf:2b:94:
                    81:8c:34:cd:3c:32:da:82:6d:ba:25:6a:7d:85:90:
                    3b:2d:a1:98:32:06:77:a5:36:6f:f3:5a:4c:e1:bf:
                    9b:ab:78:95:2d:34:80:16:0f:bb:c4:cd:c1:2e:7c:
                    32:24:20:6a:53:5a:a0:14:4c:86:c0:eb:22:40:1b:
                    bc:41:c9:76:6c:3a:77:53:53:1f:da:6e:af:df:ca:
                    c1:63:f5:ab:33:4a:81:b5:a3:fa:7b:aa:0f:f4:9e:
                    18:bf:ee:35:b7:bf:66:da:d5:84:de:93:4e:c9:34:
                    85:9e:1b:57:70:cb:28:55:ca:7a:7a:0a:90:72:d2:
                    1b:0c:25:b2:fd:07:e6:c4:7b:65:6f:a6:a6:21:30:
                    9a:25:c7:71:e1:81:2f:48:1f:ca:85:99:75:a0:33:
                    54:41:b7:a4:7a:0b:06:f1:df:8b:77:3d:32:36:b9:
                    93:9d:fa:96:20:dd:70:72:07:c5:5a:5c:97:47:fd:
                    50:9b:a5:6e:00:45:52:1d:70:cf:af:89:5e:1a:8b:
                    b8:5f:a0:61:b5:38:cb:27:76:a2:c1:84:cd:f3:d4:
                    e0:4e:bf:d7:b1:9d:0f:8f:34:b0:1c:5e:66:9f:c7:
                    a1:3a:75:5c:d9:77:f2:4d:7b:68:c3:bd:c6:72:0c:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:93:1A:3E:68:69:BF:0C:1D:35:E8:9F:49:10:3D:B4:6E:3F:19:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:e6:53:fc:85:84:cf:af:2d:eb:ea:e0:71:31:a5:7b:e9:
         3a:48:30:43:ce:2a:8b:2c:0f:c2:4a:57:5b:63:27:27:29:0e:
         05:00:0a:a7:ee:3c:f5:74:54:22:5e:b1:b0:fe:33:d4:79:cd:
         b3:b2:d6:21:02:43:e9:e7:a3:01:44:c5:ea:52:ce:cf:81:d4:
         3b:c7:9e:56:98:a0:d7:4a:9e:2b:cb:fe:e8:86:03:70:5f:fb:
         d8:a3:6d:47:f7:be:70:a0:3d:61:48:ff:e6:7e:29:93:a5:fc:
         ad:30:9d:d4:aa:ae:9c:89:5a:b6:62:be:60:a3:bd:62:8f:c3:
         96:0d:f8:d8:07:23:5d:a2:b8:0d:08:05:0e:63:f6:d7:64:bf:
         6a:68:ba:4c:34:6e:16:58:8d:d6:60:bc:f6:f6:0f:65:73:02:
         1e:a2:4c:93:fd:35:d7:a8:46:74:c0:88:b1:32:5c:bb:7e:5d:
         41:a1:da:1d:cb:5b:d0:f6:d8:6f:03:4c:b6:5b:47:4a:3f:4d:
         ac:4e:02:1c:1b:69:51:1b:57:24:87:ab:3b:c7:51:ed:92:b1:
         b2:78:2a:ab:e3:8e:c0:fa:29:e2:d9:a5:66:04:65:a9:39:c2:
         47:0f:36:12:2b:a5:ff:d4:a0:10:86:18:43:58:51:ca:5a:e5:
         fa:42:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:20:22 2025 by rpki-client