Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b2de022b-59d3-35e1-a18b-2d90acfafc9a.roa
File:                     b2de022b-59d3-35e1-a18b-2d90acfafc9a.roa (raw, json)
Hash identifier:          7sysUpTDL5jcvgqqMpcOVz2oeg+MHPw6fZ+nB5hK+l8=
Subject key identifier:   08:B5:5F:08:73:CB:A8:DB:12:0A:31:E2:AE:93:EE:70:33:6B:23:8B
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584AC876799BBAD008098BC72000
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b2de022b-59d3-35e1-a18b-2d90acfafc9a.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     213753
IP address blocks:        163.123.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:79:9b:ba:d0:08:09:8b:c7:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=aa38dd24-d0ce-4096-b0bc-118c08353eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:4f:57:91:f5:ab:ba:bc:36:99:2c:d8:c3:
                    5e:d2:9c:ea:76:85:5c:77:46:5d:06:9b:6b:b1:46:
                    1a:d2:00:15:b1:02:85:f5:48:6e:1d:ef:6d:2e:d6:
                    73:70:8f:0a:1d:48:aa:d8:35:a5:5f:53:fe:d6:14:
                    d6:b6:05:99:66:71:d1:92:b3:20:e7:a0:04:d7:73:
                    44:ad:79:2a:e5:96:40:28:17:5b:d5:b4:7a:ea:c7:
                    8a:c8:01:e0:c7:c5:dc:47:43:7f:05:af:60:14:95:
                    02:3d:59:20:bf:93:1e:3a:37:04:a9:14:5c:4a:e8:
                    f0:a9:32:32:90:3e:9a:2f:da:73:e7:e6:53:5b:11:
                    91:87:cc:10:32:c4:74:25:f1:16:8b:35:d7:fa:c8:
                    a1:56:5d:04:38:55:43:b9:31:c2:35:d3:8a:ca:f4:
                    94:e7:4e:73:86:de:dc:0c:77:3f:fd:47:f0:d0:36:
                    a7:24:a6:3a:ba:4b:ba:a3:b5:ab:6b:e2:18:e6:55:
                    1e:a3:bb:98:e6:b1:8b:02:b7:4a:53:fa:a7:45:c3:
                    7c:86:73:92:30:37:9e:9d:c5:23:25:dc:e5:17:16:
                    93:b4:f6:48:b2:4f:a9:08:6d:0f:be:60:59:8e:4c:
                    25:83:79:ae:9f:5e:3b:19:4e:01:b9:3f:f1:4a:1c:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B5:5F:08:73:CB:A8:DB:12:0A:31:E2:AE:93:EE:70:33:6B:23:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b2de022b-59d3-35e1-a18b-2d90acfafc9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:fb:e7:f2:75:a0:0a:03:bf:4f:94:99:86:49:a3:4b:a1:
         8a:ea:4b:04:4e:f1:7a:44:e4:9c:ad:3e:2b:78:65:d0:8d:77:
         88:a5:51:36:7d:3c:7a:95:02:53:fb:eb:81:06:45:0e:b8:a3:
         fc:cc:56:30:9c:f2:1d:54:09:86:6d:c5:d4:12:03:1a:c3:65:
         40:89:df:d7:e5:52:56:27:a5:8a:ed:b6:7e:82:19:1f:58:a9:
         36:58:f0:29:18:a8:c1:52:7c:77:f9:18:a4:2b:16:6d:35:f8:
         f3:3f:eb:e2:13:e9:2d:1c:ae:bf:a4:18:1f:b0:ab:e2:ba:9f:
         12:c0:18:b3:fb:f5:f6:f4:b7:28:65:c3:a8:73:cb:57:b3:7e:
         c9:66:cb:3d:32:50:a8:12:b8:77:6c:63:ce:77:90:65:49:7d:
         46:20:59:c1:e7:39:f4:e8:46:58:2d:e6:e0:5f:31:a2:ba:64:
         e1:38:cf:1c:11:ff:62:35:49:c7:dd:40:9d:2b:a7:ed:52:5d:
         67:49:f2:c2:05:88:5a:20:c7:77:0b:d9:bd:cd:23:34:15:de:
         f4:1c:d4:7f:ba:fe:18:f7:30:84:5a:66:e8:a4:5d:9c:e4:cb:
         94:10:83:86:a3:32:cf:74:17:1c:a9:db:25:70:b7:92:4c:7f:
         9f:47:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:11 2025 by rpki-client