Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
File:                     c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa (raw, json)
Hash identifier:          qgifi1AMSZTZiGilNB2gMZlzGrJHYvPCZxyvPZVJbD0=
Subject key identifier:   58:0D:4B:E6:CF:0E:DB:F6:22:F8:F7:8D:F2:61:A3:2E:95:61:A2:E8
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584AC87643B735E400F82431CA30
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     53856
IP address blocks:        142.202.116.0/23 maxlen: 23
                          172.110.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:43:b7:35:e4:00:f8:24:31:ca:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=01a9924d-e36f-45da-a812-500787e420ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:30:e4:89:02:f0:e1:37:8a:33:35:0b:f5:
                    42:81:a6:30:4d:d1:bb:9f:54:aa:f6:4c:a0:24:eb:
                    86:7a:2a:3d:db:ee:6d:8f:69:f9:ee:11:56:a3:5c:
                    e9:43:b8:f8:5f:41:31:e1:61:6f:52:67:f5:da:ae:
                    e8:d7:bf:ce:32:44:06:7c:46:4f:9c:ae:55:b0:14:
                    13:53:08:0c:bf:e6:88:fb:3a:bd:aa:77:4f:53:bd:
                    6b:d9:f4:f3:72:bc:aa:1f:e8:5b:dc:4f:9e:77:00:
                    ca:2f:9b:d8:b7:88:58:52:41:b8:15:4c:0b:d9:17:
                    56:49:71:0e:43:fe:1d:55:87:dd:a9:a8:b0:aa:d9:
                    33:1d:04:b0:e3:d8:08:65:2b:9e:65:aa:3d:30:93:
                    28:13:83:e9:56:c3:54:3b:89:91:0e:a8:88:4e:ce:
                    18:94:40:a1:e5:98:df:ef:6f:5b:e5:27:45:8c:f3:
                    00:b5:6f:9a:85:51:86:5a:89:40:aa:9f:7f:be:4b:
                    61:9f:12:bd:1e:ec:e1:38:1c:bf:a1:36:81:1d:dc:
                    77:ce:7d:25:d1:21:3e:35:f2:c8:96:28:98:f1:d6:
                    51:e3:76:73:aa:05:37:cc:da:d1:43:47:35:80:43:
                    8c:b4:a2:df:ee:42:f6:1b:79:05:7d:80:cb:9f:1c:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0D:4B:E6:CF:0E:DB:F6:22:F8:F7:8D:F2:61:A3:2E:95:61:A2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.116.0/23
                  172.110.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:f1:1d:d0:ae:77:fe:a4:b7:ab:7a:9f:61:3b:00:05:4a:
         45:41:67:af:1e:de:a1:d9:b6:6e:d7:46:cb:1a:df:58:8b:aa:
         81:c1:3a:9c:5f:a6:2b:18:31:9b:2b:d3:57:e3:77:07:7b:1f:
         47:98:7b:9c:27:de:4a:58:8e:60:8f:6e:b5:f0:fc:c1:ed:cb:
         96:5f:c9:69:73:93:92:4f:51:7a:98:0d:24:7d:18:42:2a:13:
         ff:e4:94:4d:9c:c1:40:61:39:21:1c:d9:4d:d2:52:d8:60:66:
         1b:9a:d5:ef:f8:25:f4:83:03:ea:e0:ba:71:a7:38:a3:47:1e:
         6b:84:30:03:07:27:5b:8b:53:2f:bb:f6:d9:80:75:22:27:66:
         73:2f:a1:41:4d:62:56:8f:12:20:99:1e:9f:fa:47:a7:0a:35:
         a1:62:8c:b9:92:4f:3f:5a:52:30:96:93:74:c3:49:91:a8:69:
         90:0a:25:67:1c:55:84:ae:04:2d:a3:18:63:15:57:f8:77:59:
         5f:bc:3c:95:ca:28:6a:3f:d4:17:aa:f2:16:c5:e9:a8:9e:a9:
         a0:27:01:24:44:49:82:3d:19:a1:ec:e3:68:bc:a5:30:f1:6d:
         6a:d9:77:06:b7:5c:45:cb:58:c8:46:6a:4e:88:d3:a4:4f:f4:
         c0:b7:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:07:03 2025 by rpki-client