Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/71333fcc-c9eb-3135-93b3-ee9c733224d6.roa
File:                     71333fcc-c9eb-3135-93b3-ee9c733224d6.roa (raw, json)
Hash identifier:          bmnvSPK7k9PB0/K9vyo2seG69N2yUAH7GUxt+vVDQWE=
Subject key identifier:   66:AE:3C:25:E1:3B:C1:65:D6:38:58:EF:BE:4B:6C:02:3D:09:77:02
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584AD3A0EFE4CE0449B4C5C85380
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/71333fcc-c9eb-3135-93b3-ee9c733224d6.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     399111
IP address blocks:        104.128.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:ef:e4:ce:04:49:b4:c5:c8:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=ba8c144a-2e9e-4491-a3e0-4c31c9adfbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:2e:d8:73:65:8b:68:22:c7:7c:2c:8f:1f:
                    2e:0f:86:36:d1:e7:67:d0:10:9f:91:74:64:ac:d8:
                    f1:75:50:5a:4d:6e:e8:f3:bd:81:c8:7a:f7:a2:46:
                    74:f3:11:fe:8c:69:76:d1:51:de:ff:fe:92:c4:e3:
                    c6:0a:9a:77:c7:ed:32:f5:b5:86:54:8c:e9:4d:ef:
                    55:f2:3d:6f:59:5d:20:82:53:df:69:3d:c0:ff:62:
                    95:2e:e3:7a:25:46:51:75:0c:3d:8e:62:ef:e0:80:
                    d0:40:e8:fb:ef:a3:f2:ff:f6:e2:04:b1:0d:7e:f3:
                    97:88:a5:6b:ef:2b:fa:10:32:73:56:6a:ec:ab:97:
                    bc:41:14:9d:68:2c:0a:ea:f9:12:05:f9:47:e3:7f:
                    23:fb:0d:08:fb:98:27:32:e7:5b:88:a3:34:54:97:
                    c0:1b:4d:90:32:01:8c:d8:28:e5:b3:22:fc:d2:81:
                    59:dd:33:11:79:1b:eb:7e:b8:07:1c:68:49:b0:92:
                    04:d9:30:34:b6:59:b7:a3:3e:a4:96:fb:56:85:f8:
                    00:c3:6c:40:8d:7e:3d:4f:ce:70:3a:47:84:99:8f:
                    b1:ef:e9:f8:e1:ca:72:ff:75:c7:af:e1:c8:0c:0e:
                    e4:d6:a7:66:33:36:90:81:a3:1b:95:42:91:d1:3c:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AE:3C:25:E1:3B:C1:65:D6:38:58:EF:BE:4B:6C:02:3D:09:77:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/71333fcc-c9eb-3135-93b3-ee9c733224d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:7a:c7:78:39:89:5c:2a:75:e5:63:ce:74:60:94:cd:62:
         48:58:b7:c4:92:fd:88:17:e4:b3:dd:a7:6f:4f:4d:6d:88:ee:
         69:ac:e3:1d:2e:44:a9:52:40:e0:d4:65:7c:d1:7c:0d:60:cb:
         2a:b2:e0:59:30:2c:d0:5f:f7:7b:03:44:82:5e:6e:65:0f:7e:
         08:f0:f5:60:61:14:09:fe:ce:5b:33:0c:82:84:54:d2:fc:13:
         48:21:e6:cd:ea:38:14:1f:21:a4:c9:5f:12:d8:2e:e1:bd:13:
         ca:de:f0:a8:2e:28:87:ab:0b:ab:64:0d:f4:9d:eb:a9:69:9e:
         cb:df:dd:f1:9c:4b:cd:d7:45:50:66:aa:a8:08:17:a7:66:80:
         50:9e:13:89:f1:2f:8d:09:c6:14:95:cf:b0:70:a2:32:56:1e:
         72:93:59:da:92:c5:d1:fe:48:7e:b5:81:d5:46:62:0c:f1:c5:
         a6:27:88:19:43:cd:df:21:42:b1:b6:b6:01:50:2e:a3:14:f9:
         77:be:41:2f:a1:57:ec:6f:c5:81:16:f0:63:21:fa:05:b4:af:
         39:90:02:86:92:65:fe:80:74:48:ea:48:50:1f:c5:18:91:9e:
         41:31:4f:1c:c1:a6:dd:ac:c2:56:01:4d:12:69:dd:85:d2:ee:
         c7:50:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:44:02 2025 by rpki-client