Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/407b2f59-2919-39db-9262-b2b76809657a.roa
File:                     407b2f59-2919-39db-9262-b2b76809657a.roa (raw, json)
Hash identifier:          mSqK21qzeOxf/TU6yU0qjiRdTq3qPbXGwGe/z5KMdS4=
Subject key identifier:   FD:1A:81:33:DA:72:3B:A1:E3:18:B7:71:C8:84:EB:B2:30:D4:6B:53
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F4328584AC066BE2D93B1B6F34D8AF780
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/407b2f59-2919-39db-9262-b2b76809657a.roa
Signing time:             Tue 05 Aug 2025 03:42:59 +0000
ROA not before:           Tue 05 Aug 2025 03:42:59 +0000
ROA not after:            Mon 03 Nov 2025 04:42:59 +0000
asID:                     1426
IP address blocks:        66.163.223.0/24 maxlen: 24
                          103.246.186.0/24 maxlen: 24
                          104.204.252.0/23 maxlen: 24
                          123.100.246.0/24 maxlen: 24
                          203.11.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:66:be:2d:93:b1:b6:f3:4d:8a:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Aug  5 03:42:59 2025 GMT
            Not After : Nov  3 04:42:59 2025 GMT
        Subject: CN=a639682d-76a9-4509-b36a-6b6da8a552e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:97:3b:e8:d7:4c:ef:15:49:c1:ae:d8:ac:
                    6c:23:85:71:11:6e:9b:f0:b6:59:64:92:be:81:57:
                    db:d6:c7:3f:9c:cd:39:b6:9a:36:a5:f4:6a:a1:8a:
                    c8:cc:fa:bd:20:a5:f9:c7:89:06:d1:27:f7:42:ee:
                    fb:9e:a9:37:5e:c5:ca:35:9f:10:11:22:e0:3a:f7:
                    13:38:88:3b:e5:74:b4:a5:5d:ea:ea:6b:9a:d3:98:
                    47:6e:7c:cc:79:b3:5f:4e:60:3a:ba:a0:16:06:dd:
                    7d:36:68:5b:d3:2f:5d:6b:ef:ed:2a:72:95:83:61:
                    b6:00:33:93:b9:2a:73:9f:0b:af:bd:b6:1e:2b:b0:
                    f0:ee:b5:67:96:aa:bf:b6:99:01:16:3e:08:de:88:
                    74:2a:f4:bb:77:53:05:98:52:53:56:40:af:0a:5a:
                    e0:9f:6d:be:48:08:20:34:ca:8d:b1:94:df:84:b6:
                    ad:f5:7e:61:d6:0a:5d:cf:4f:21:62:00:90:74:b5:
                    25:c3:7b:61:84:ed:e0:fb:99:d5:60:c5:dc:3f:fa:
                    3e:21:8f:fd:be:44:34:49:9c:3a:aa:e1:45:1d:e0:
                    cb:35:50:7d:31:11:a2:fb:fe:3b:d6:89:b8:d0:4c:
                    1f:f5:c2:fe:ce:c6:90:4f:0d:0c:79:14:00:b9:33:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1A:81:33:DA:72:3B:A1:E3:18:B7:71:C8:84:EB:B2:30:D4:6B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/407b2f59-2919-39db-9262-b2b76809657a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.223.0/24
                  103.246.186.0/24
                  104.204.252.0/23
                  123.100.246.0/24
                  203.11.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:5f:39:eb:7d:a2:0c:98:12:41:28:d4:41:f0:70:2d:b1:
         f7:87:77:ed:d3:9b:51:4c:67:93:ae:fd:f9:6b:fa:82:3e:48:
         5a:7e:ec:39:1f:81:69:bf:bc:97:33:8c:5e:54:4f:84:31:4e:
         72:4e:ec:41:24:41:17:1d:75:40:b6:d0:ff:70:bb:f0:ea:e9:
         d2:4c:d8:d5:8d:85:ba:26:b4:d4:71:f0:b2:1f:10:3c:c8:d2:
         21:99:51:1a:de:59:23:84:10:7e:67:d2:7e:22:05:70:d0:e8:
         f7:b6:3f:a6:94:31:5e:35:43:76:db:b2:5a:e5:21:92:86:2f:
         77:8f:ce:25:03:4b:c2:fd:05:5e:6b:1c:0e:62:61:08:f0:8e:
         46:b6:d5:45:23:65:31:90:ff:43:94:ab:da:67:e8:d8:05:ec:
         92:03:6f:79:f1:c7:f9:c7:aa:d9:b8:4b:e6:88:1a:38:99:a3:
         f2:c9:ef:e2:30:a4:7e:58:56:6a:4a:f1:af:eb:85:63:e0:1f:
         5b:fa:5a:ca:60:5c:42:42:0d:b1:26:f8:6c:96:84:46:9c:96:
         f0:4e:66:a4:b6:84:67:f6:55:2b:df:60:45:0e:0f:8d:14:57:
         88:a1:dc:e9:4c:08:fa:f4:92:17:21:5b:a5:e5:dd:4c:63:49:
         ed:8a:cb:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:52:13 2025 by rpki-client