Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ae5d7173-b54e-3549-9900-614998da1cf0.roa
File:                     ae5d7173-b54e-3549-9900-614998da1cf0.roa (raw, json)
Hash identifier:          qkQw4abyv4UUfQ06silKNZKNXl1ERASio/AtQHgtM9c=
Subject key identifier:   FB:6C:59:2F:5C:E7:8A:C2:9F:C1:2E:52:84:54:15:0E:68:1F:16:D9
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584ADA9BC2C272A43104DDC0B300
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ae5d7173-b54e-3549-9900-614998da1cf0.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     40317
IP address blocks:        137.119.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c2:c2:72:a4:31:04:dd:c0:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=5d57b8c7-6c70-4bc3-a297-07bd73159492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:30:06:34:81:58:85:ce:a7:a8:25:25:7b:
                    b5:9c:0a:22:0f:0c:00:6e:af:02:72:07:eb:0a:9c:
                    4c:08:fc:76:4e:7d:92:7f:69:cd:0e:c0:ff:f7:32:
                    53:07:ff:d8:78:cc:1d:95:e3:10:40:56:9c:b4:7e:
                    8f:11:1c:e1:92:eb:83:00:f5:a0:bd:e0:11:a4:f8:
                    65:c2:16:e2:67:d3:c4:3e:93:31:00:85:76:2c:94:
                    46:1a:02:30:6e:d7:9d:e8:05:ea:18:6e:23:04:a1:
                    24:22:34:2b:11:b3:1b:f9:14:ed:a7:90:5d:4a:7b:
                    05:ee:2a:5b:bc:db:58:16:96:43:01:37:bd:26:0a:
                    77:26:06:4b:e5:4e:24:c7:a1:37:56:3f:bf:98:2e:
                    86:0c:4f:a2:69:37:08:28:3d:a8:79:4f:75:e3:ea:
                    ed:d0:40:4e:bb:0d:56:f2:d9:67:52:4b:4b:e5:6b:
                    e5:bb:3c:1d:69:e9:0d:c5:17:0f:d4:a3:54:dd:d0:
                    21:30:a2:e6:4e:f5:3c:48:c6:54:9b:41:e4:1d:9b:
                    14:bb:80:76:3d:d2:f0:5b:cd:93:67:ce:59:40:74:
                    9c:36:eb:14:0b:6c:4d:24:6c:73:ec:00:57:23:3b:
                    a1:99:48:9d:10:76:77:06:6f:04:56:bc:9e:cb:ec:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:59:2F:5C:E7:8A:C2:9F:C1:2E:52:84:54:15:0E:68:1F:16:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ae5d7173-b54e-3549-9900-614998da1cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:e4:91:70:60:ce:13:60:c4:99:b6:df:84:94:ba:b8:76:
         38:7b:9c:96:2c:b8:44:70:98:18:d5:92:6d:1d:ff:42:73:2a:
         ad:a1:6f:b0:a1:24:a4:7d:11:c9:23:79:73:0c:4c:b6:0a:39:
         ba:28:97:cc:df:f6:d0:3b:1c:ba:d7:10:ba:ba:18:c1:bb:2a:
         e3:d1:3f:57:a6:e4:85:df:bd:4b:69:7f:8e:b8:99:52:31:da:
         d9:59:55:30:27:95:5e:90:a2:55:60:eb:da:76:03:dc:19:44:
         78:5c:8c:e0:d7:5f:66:bb:85:02:bf:27:e6:ca:c8:25:9e:57:
         8d:dc:b0:8d:14:a3:c9:e4:6c:8c:4c:f5:2b:0d:6a:1f:05:ba:
         7a:3e:12:35:0b:ba:e8:63:7c:04:6c:c6:29:ef:a1:69:a9:84:
         e8:69:d5:63:7c:e7:e9:c2:ef:b2:bf:95:cc:3d:86:61:5f:ab:
         ad:43:d1:a5:13:35:2d:c1:74:18:a0:e2:1f:af:f1:90:20:00:
         bf:ae:3a:a2:65:89:5c:0f:9f:e2:34:de:85:88:40:78:a1:1a:
         25:fb:e3:52:b2:df:f6:29:b0:33:dc:09:27:67:09:76:7f:dd:
         b8:dc:7d:df:fe:e0:3b:06:d9:60:72:06:59:77:2b:8b:84:c1:
         ed:94:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:55 2025 by rpki-client