Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa
File:                     9d47a116-fd9c-32d2-9643-721de89ac8ef.roa (raw, json)
Hash identifier:          w+W/VBmjXb73gkkDE95FsTjDLj3AmsG2msOJZYPlYU0=
Subject key identifier:   2E:F9:D8:A2:2D:C5:27:9E:91:03:69:52:19:A7:93:C4:B2:F9:4F:D0
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584AD0D66DA1BB4A91D89766E240
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     1742
IP address blocks:        128.103.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:6d:a1:bb:4a:91:d8:97:66:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=10507652-c95a-4ee9-b00a-48391c828f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:49:87:54:86:27:6b:f8:94:7b:f3:b3:8e:
                    f0:c5:2b:a1:35:87:6a:8d:93:55:4a:32:34:64:34:
                    ff:57:f7:24:45:9c:2d:9d:b3:28:cd:33:b1:45:c5:
                    10:e3:86:2c:f2:fb:65:7b:e0:e5:57:02:96:64:94:
                    94:96:fd:01:6e:b6:a5:f7:ea:3d:e2:6b:b4:c1:8e:
                    53:cc:a6:77:36:81:d1:71:79:98:85:7e:35:e6:3e:
                    6a:3d:90:21:d3:74:91:6e:be:7a:5a:9d:31:05:c5:
                    31:ca:ee:ab:fa:5b:8b:e0:2d:e9:23:78:0f:23:41:
                    15:a0:50:01:c0:7e:74:c5:e0:1d:61:b5:c5:bb:eb:
                    3b:62:76:75:8c:40:cd:7e:f8:27:0a:73:24:7b:f0:
                    f4:e6:ce:d2:43:fa:b0:05:da:5c:79:70:c8:47:2b:
                    0c:29:a1:ad:96:c3:19:3d:e4:37:78:36:c1:76:c5:
                    94:98:c1:93:71:0d:52:c2:cf:81:46:bf:7e:b9:2d:
                    03:e3:43:3d:8b:f1:3b:8e:c4:5e:02:2f:d3:0d:29:
                    9d:5d:3f:45:59:7c:4a:6a:ff:35:42:50:9f:da:11:
                    54:de:4c:63:88:fa:ca:b6:11:93:ad:b3:e3:e4:93:
                    47:27:99:24:a1:69:4e:74:d2:55:fb:04:cc:ba:99:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:D8:A2:2D:C5:27:9E:91:03:69:52:19:A7:93:C4:B2:F9:4F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:f3:0f:5d:2b:dd:23:c9:18:12:64:6d:e7:83:82:a3:32:
         2f:99:d7:4d:d9:55:89:70:03:6b:64:1a:b1:c0:2e:0a:b9:dd:
         12:2d:85:99:16:dc:8d:00:f8:d1:8f:32:7f:ea:22:dc:2a:d9:
         ab:f8:69:dc:95:54:10:6b:a8:1c:39:3a:73:0e:71:b0:6e:c6:
         26:78:e9:3c:39:d8:d7:31:4d:57:3d:48:ae:f7:00:68:45:2e:
         08:1d:61:a2:53:ae:e3:4a:47:41:ae:63:f1:c2:fa:19:12:6d:
         a5:fc:73:0a:81:29:84:60:1b:85:7d:0b:dd:c2:88:7d:54:23:
         1c:3c:e3:14:d0:18:7b:95:15:ef:92:90:e6:24:bd:98:08:60:
         cc:0b:ed:cb:f2:d5:2f:38:16:54:82:86:f0:82:3b:18:46:ce:
         92:73:45:46:64:56:b9:8d:f4:9a:b4:6b:3a:24:69:cf:7d:ab:
         42:f0:8b:e5:a3:d8:ba:45:d2:9e:33:0b:48:ef:8f:a8:e8:a6:
         f8:04:9d:c5:b0:c1:e1:c9:df:b6:a0:fa:ef:ae:fe:95:c8:a1:
         55:31:73:f3:ba:82:98:97:c4:aa:75:0e:36:7a:e7:55:0b:1d:
         02:89:75:4b:7f:c0:be:18:42:b4:af:15:5b:78:8f:e7:92:aa:
         da:16:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:39 2025 by rpki-client