Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa
File:                     e31456f1-214e-30d0-9c8f-f3fa76292a27.roa (raw, json)
Hash identifier:          k9G0XI2wz6YA7VoP0uUqYvXHF00++jho/uy6uLiTWnU=
Subject key identifier:   33:42:02:CE:11:D4:14:BD:E5:B1:DA:2E:6C:70:5E:DC:91:B6:DB:B4
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584ACCA653D6DA373A042EF12BC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     30456
IP address blocks:        141.195.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:53:d6:da:37:3a:04:2e:f1:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=b731e8ab-4f44-4ada-870a-ef3b378c508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:8c:28:85:ff:98:9e:b0:61:38:55:13:e2:
                    a7:26:ae:77:f2:bc:ac:b8:45:10:11:d0:1d:3f:1c:
                    4a:f8:64:00:12:17:e4:5a:ba:09:9b:e0:14:02:c5:
                    5c:65:ca:76:18:0d:35:9d:fb:54:bd:9b:1a:e9:69:
                    d1:4e:20:0b:6a:b7:4d:9c:85:f2:91:70:25:04:fe:
                    1a:cd:25:42:62:76:42:3f:b7:45:ae:8d:5f:bc:65:
                    7c:cb:44:e8:cc:49:74:b3:4b:9f:a4:fd:9e:91:d3:
                    cd:60:12:42:f6:0e:aa:b0:60:db:de:da:6e:17:ef:
                    8e:46:34:a7:83:fd:c1:36:00:69:67:c9:e4:c2:ff:
                    33:17:30:08:f0:87:33:31:c3:f6:51:91:42:ae:07:
                    7a:04:f7:f3:a5:0a:3f:78:66:b9:46:ba:af:5d:96:
                    0d:c7:5c:86:a8:d4:62:7d:fc:09:b4:73:7b:b2:ce:
                    43:05:57:03:fe:a2:30:66:80:99:03:d9:46:39:7f:
                    a8:ac:2a:3e:e2:05:a7:36:2b:99:0f:de:23:aa:53:
                    04:2c:ff:ad:cf:cd:9a:2d:41:17:ab:53:6a:ec:6d:
                    bf:a4:a0:ff:b3:9f:47:72:b0:7f:0e:8e:39:ef:d9:
                    19:61:6b:8a:f7:37:aa:75:bd:c5:d3:7c:e3:f5:95:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:02:CE:11:D4:14:BD:E5:B1:DA:2E:6C:70:5E:DC:91:B6:DB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:1d:d1:75:58:6d:6f:e3:16:21:e3:93:2b:ac:bd:0c:73:
         ec:75:aa:a3:f7:43:8c:e0:67:85:4c:60:5f:f4:51:7f:c3:e4:
         35:64:fc:7e:86:53:5b:5a:a2:74:ed:2b:c0:1b:16:e1:eb:74:
         64:1b:6e:2b:7f:d9:24:d6:fa:4e:67:b8:6d:a9:86:2c:09:d2:
         98:59:30:c4:e2:da:4b:4b:0e:f7:2e:f4:d4:7c:6c:82:99:9a:
         3c:77:37:55:a8:f3:b7:37:b0:f2:c1:8a:11:ec:19:cb:7c:45:
         69:6d:18:04:fe:b4:ab:61:86:92:d0:35:56:a4:3f:15:ca:2e:
         95:9f:25:6b:1f:ed:7d:3a:ea:72:15:14:48:50:6a:30:25:cf:
         f8:cf:26:2a:55:42:55:0f:c9:47:d1:1f:9b:51:2f:c4:d3:77:
         29:ce:ea:6a:af:51:d2:b1:ce:a8:0d:fd:81:50:b8:37:ee:ba:
         ac:66:30:41:a0:66:90:33:f4:41:11:14:69:dc:6c:ed:bb:98:
         42:49:8e:9d:7f:8b:66:c8:d0:b7:85:e3:c1:85:20:e9:00:28:
         8b:bb:19:6d:a9:60:31:a2:8f:8e:92:5d:3c:a0:0a:ce:21:57:
         d3:14:57:ea:50:12:61:46:e1:75:3e:bb:b9:f0:31:8a:ed:98:
         0a:30:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:11:44 2025 by rpki-client