Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa
File:                     ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa (raw, json)
Hash identifier:          775r1CIfxGVBNahAUK1PH1LX7VDuw5zuAG80svKOlNE=
Subject key identifier:   CB:69:F2:FC:C9:65:2E:DB:BC:35:DB:46:B2:39:AA:AD:78:EC:55:F3
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F4328584AEE2682577663C0D5F9CB2000
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        162.252.172.0/24 maxlen: 24
                          162.252.173.0/24 maxlen: 24
                          162.252.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:82:57:76:63:c0:d5:f9:cb:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=42ab261f-03ac-4212-8f49-e8c1de69a9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:a9:ca:eb:95:72:f6:80:8b:28:50:0b:8f:
                    9d:2b:01:8b:3c:8a:07:da:71:4d:a0:dc:7f:fa:c7:
                    26:f7:ba:31:1b:2c:f6:62:20:28:d5:12:f4:ac:79:
                    7a:6f:ee:de:c6:07:38:80:bb:2a:ab:23:fa:d6:f1:
                    1f:fb:b7:37:00:81:51:19:e2:8d:69:1c:00:13:8f:
                    11:b5:70:c8:bc:ba:ae:b5:06:41:02:ee:d3:a1:8d:
                    ed:33:3c:e6:c8:69:8a:8b:a6:69:31:be:4d:4d:1d:
                    9b:87:8c:ac:03:bb:b9:a7:5d:20:6d:da:28:22:92:
                    94:65:8c:94:8e:5b:2a:46:05:67:e1:32:a4:88:a0:
                    b4:f0:39:83:9e:95:e0:e4:2f:7e:9a:99:b3:ae:53:
                    35:8b:27:64:90:b0:0e:74:43:eb:08:92:ac:e5:78:
                    e1:0a:6f:e9:da:1c:81:1b:77:73:4e:80:6a:86:10:
                    6b:2e:d8:a1:03:64:40:39:77:79:42:f9:f8:0c:e1:
                    5a:2a:59:d9:4f:72:1d:85:bf:be:4e:23:ee:c4:85:
                    94:5d:d6:91:ee:de:3c:29:1e:9e:b3:93:3b:e4:60:
                    73:70:52:3e:5b:b6:79:f7:f6:b3:93:5c:f0:62:f4:
                    cb:9d:27:1d:34:5b:0f:2c:5a:eb:67:a3:e2:f4:6e:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:69:F2:FC:C9:65:2E:DB:BC:35:DB:46:B2:39:AA:AD:78:EC:55:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.172.0-162.252.174.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:67:96:dc:a7:63:aa:17:00:23:0a:00:e2:e4:08:d2:2f:56:
         8f:99:f9:ef:4d:fd:4f:fd:e7:4b:74:04:f6:79:b0:1d:42:6d:
         61:20:da:85:93:53:ce:23:a3:c9:34:35:29:06:45:ba:ec:8b:
         0c:f1:43:29:65:c3:2f:1e:a3:e0:39:77:ab:92:d1:dc:7d:8a:
         eb:b8:fb:83:12:a7:ad:68:fc:97:1b:59:f9:8c:65:cc:6f:c7:
         f0:b0:55:fe:57:82:e0:56:17:d0:fb:e3:23:31:fb:cc:a9:60:
         15:c9:32:11:dd:c2:d4:e0:e9:ed:a1:ef:55:b8:c6:d0:95:cc:
         38:71:cb:ec:a0:53:26:4d:2d:ab:69:07:b6:2d:39:5a:80:af:
         be:4d:e7:b1:17:bb:9c:ee:40:02:43:53:2d:70:94:b0:f2:6d:
         ed:70:62:32:72:cb:1c:fa:ed:50:d8:f4:32:b3:a7:2f:cc:8c:
         a0:cd:d3:9a:e5:78:85:5a:ab:94:76:7d:9a:b9:cb:d4:72:d8:
         5a:bd:fb:c2:d0:62:4c:81:d8:6d:af:1a:ed:0f:52:d8:0b:c0:
         d4:8c:66:9b:60:ff:f8:67:db:79:5f:1d:c1:ef:30:c5:56:6d:
         f6:ef:36:a8:bc:81:94:5e:6d:a4:1d:10:d2:e0:8a:b6:ff:d7:
         bc:fc:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:51:06 2025 by rpki-client