Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e5c4c2d4-66e1-3a73-9bf1-d332eaa48e84.roa
File:                     e5c4c2d4-66e1-3a73-9bf1-d332eaa48e84.roa (raw, json)
Hash identifier:          6nslnT3aKClgGYMLKVHRnUe2coxfwXw1HA2IMYjjMzA=
Subject key identifier:   00:E8:E4:02:BD:70:FE:F6:4A:E9:FC:AF:7E:64:94:D9:95:D1:ED:56
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584AB2217B00F6356087FE3D0654
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e5c4c2d4-66e1-3a73-9bf1-d332eaa48e84.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     36829
IP address blocks:        104.156.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:7b:00:f6:35:60:87:fe:3d:06:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=aca7576c-bcfc-4929-a18f-8102ee2bf621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:83:f4:d7:ad:3a:ed:1a:65:46:80:e4:93:
                    ac:2c:0f:99:ce:2d:1a:6b:37:da:b7:e8:84:94:f2:
                    a0:34:4c:3a:b0:df:31:02:8d:d4:b9:e7:0a:39:38:
                    4c:c5:99:bf:70:a3:ab:17:78:00:0f:d6:52:d3:4e:
                    82:47:38:b3:1a:57:f1:c6:35:6a:8a:8c:61:ec:33:
                    01:9f:d8:3c:36:91:17:03:f7:35:ba:f3:69:8e:1d:
                    7b:77:06:de:6e:06:57:6c:6b:bd:f4:a5:60:6a:14:
                    ba:fd:60:39:4f:ff:d4:f4:90:de:3f:a5:48:e3:a2:
                    a7:f3:e0:bc:e6:11:da:33:45:f0:13:ae:98:e8:0b:
                    b2:0a:72:85:c4:c8:c8:d5:19:0b:15:d2:1f:fd:d1:
                    f0:d6:82:81:27:c1:aa:2a:35:3b:8c:8b:70:3d:37:
                    bb:3b:7d:41:f0:e8:9d:85:0e:6e:a3:23:6c:22:68:
                    33:9a:f3:82:72:06:28:94:a7:bc:31:02:16:c6:4d:
                    e8:ec:c0:85:dd:de:fc:b6:e8:32:06:54:fd:a2:92:
                    9b:17:75:4e:16:d2:ad:c9:0e:b3:e6:b6:b0:3e:17:
                    1e:07:5a:7c:3b:02:3e:a2:29:72:a6:53:29:e8:fc:
                    5f:46:d3:26:58:b2:c5:7f:82:d5:81:70:4e:93:80:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E8:E4:02:BD:70:FE:F6:4A:E9:FC:AF:7E:64:94:D9:95:D1:ED:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e5c4c2d4-66e1-3a73-9bf1-d332eaa48e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:4a:c3:11:4a:fd:de:dc:8c:e4:07:eb:77:ff:1e:7d:56:
         f7:73:b8:66:bd:fb:a8:62:65:aa:00:ff:c4:2a:65:1a:10:f1:
         dd:06:ba:ad:6b:5b:16:91:a2:94:ce:c2:b8:33:ac:33:62:5e:
         0a:ac:02:c2:88:d3:4d:b5:79:f8:c8:9f:56:8d:4a:0b:ab:d2:
         84:46:f0:6e:98:67:0c:27:47:1e:54:3e:0e:54:7c:75:bb:2d:
         f4:09:e6:60:d7:75:6d:cf:48:c4:8f:8e:48:eb:29:b2:e6:9e:
         e8:a8:5c:4c:13:2b:58:cc:54:9e:17:b8:d5:06:ce:8f:ae:a0:
         43:17:e0:1d:67:6f:31:b7:da:9f:e4:21:db:4e:51:c5:56:45:
         13:1e:ed:fd:95:0f:76:fb:c7:f4:b6:f7:1d:fa:3d:66:0a:62:
         94:e8:1a:6f:15:1c:dc:cf:01:4b:0c:42:b2:ab:62:35:0e:70:
         2e:d3:8a:2b:58:c2:c0:96:bc:8f:cb:35:1a:97:88:3a:cf:2f:
         98:33:e3:0c:43:89:e7:29:d7:81:a9:ba:96:8f:48:83:7d:61:
         5c:27:ae:40:b7:47:01:18:55:2b:b5:1f:b1:72:e9:53:39:4e:
         8e:ec:c3:19:2b:d9:31:e2:0f:b2:68:c0:d0:01:c9:a5:30:86:
         f2:5c:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:42 2025 by rpki-client