Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
File:                     72ea9654-6e11-38af-9a09-c95f74175c2e.roa (raw, json)
Hash identifier:          BowkLrofbAwFq+nnagc6Wo8Ylzoo3Y7URp3LoSSM5Ag=
Subject key identifier:   CE:03:FE:B4:0A:B6:7D:6E:78:D4:93:E8:A8:0D:76:F3:CD:40:90:B7
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F43285849C20A1B4DDF7B8109E3EFA180
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     397041
IP address blocks:        134.195.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1b:4d:df:7b:81:09:e3:ef:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ca95f02f-b0f9-463e-b1c8-23056ce8b372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:1e:97:6f:1b:1b:fa:35:89:b2:73:1b:d2:
                    18:ef:e3:48:fd:66:ce:e3:d4:c5:ec:55:79:b2:ff:
                    73:05:f5:95:02:a1:ed:cf:46:12:72:a6:f9:14:48:
                    7c:39:e7:19:60:12:dc:8d:35:6f:4c:2f:c8:b9:9b:
                    09:cf:f2:d9:29:c4:1b:1f:05:7a:c9:9a:f8:76:e6:
                    bb:01:c8:4d:ce:5e:cb:ec:68:75:8a:a2:61:98:1b:
                    da:4c:3f:44:68:0b:65:32:c2:13:ba:c5:d4:4f:ed:
                    72:eb:96:bd:70:73:a9:e8:1a:b9:af:2c:aa:ea:7e:
                    7d:f8:c1:b8:95:cd:13:96:90:f4:13:ac:e9:67:c1:
                    b5:e5:81:e3:75:aa:1c:28:d9:27:42:aa:82:6f:54:
                    d4:c2:a5:c3:6b:7d:62:96:4b:b9:1e:ef:a6:c2:82:
                    4e:74:30:d5:44:43:7f:1e:e9:3c:4f:1d:a7:e4:dd:
                    17:d0:23:9f:54:7b:a8:9f:71:68:81:98:87:3a:81:
                    dd:c9:a0:0e:f6:f2:17:5a:5b:26:0d:a7:6f:48:37:
                    62:8c:1d:1f:9d:66:18:5b:f9:64:12:c4:7b:df:16:
                    97:4d:73:9b:ab:4c:fe:bd:37:ea:0c:b5:42:2d:f1:
                    65:72:ad:d2:1c:97:f5:cb:72:d3:0f:7d:f9:8a:8d:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:03:FE:B4:0A:B6:7D:6E:78:D4:93:E8:A8:0D:76:F3:CD:40:90:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:e4:1d:45:a1:af:ce:b6:0c:ed:80:b1:20:a8:34:57:d8:96:
         4f:06:dc:3b:8d:f0:fa:13:ef:c4:52:71:84:a2:ba:c7:8b:af:
         da:c4:df:28:cb:48:e9:c4:42:b3:bb:81:2d:81:f6:6c:b3:f4:
         d3:b9:ea:89:7c:cc:ff:1a:08:c5:ee:88:05:1f:ed:9d:24:8c:
         f8:41:82:10:ea:4a:8d:cf:f3:3a:09:fc:b7:e6:d9:9b:b1:a2:
         14:d1:a5:a3:2b:16:ff:ce:13:a7:9d:c3:63:4a:22:6c:81:92:
         c1:a6:a2:68:0d:ca:be:9a:9d:ed:f6:95:e5:fb:8a:6c:14:78:
         6b:ce:10:27:c6:e2:fa:46:32:30:14:5c:21:6d:34:4e:fe:3f:
         df:a9:f6:b4:80:6d:1b:4d:0e:47:04:fd:97:80:61:73:c7:b8:
         fa:22:ac:c6:68:a8:ce:9c:82:b3:d2:3c:b0:63:67:72:be:4d:
         aa:6b:91:64:ea:76:4e:3f:84:a4:17:ef:08:ee:13:af:c2:71:
         97:60:32:c4:2d:a3:ff:3c:32:5d:85:5b:df:08:76:76:e4:43:
         c4:d2:20:dc:15:d9:a6:6d:82:10:2a:7f:ee:9c:8c:97:97:c2:
         e6:88:df:cb:a6:d8:1a:89:1e:97:c2:84:74:6c:18:d6:7d:81:
         29:57:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:07:13 2025 by rpki-client