Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1/9e71e72a-ad5e-3b1c-ae3f-947f2898e30c.roa
File:                     9e71e72a-ad5e-3b1c-ae3f-947f2898e30c.roa (raw, json)
Hash identifier:          OopDIyklbxKx+dqqmekYCwmKqCU44HQag/8HQdwIxbs=
Subject key identifier:   BD:A2:23:76:59:7E:06:15:2B:AD:6A:76:DD:A7:DE:27:53:E3:3B:72
Certificate issuer:       /CN=8255b0dd-111a-4baf-be90-57b40f505cd1
Certificate serial:       010D0C9F4328584AC9DB9C38FF7A848C8B77B130
Authority key identifier: B4:E0:4F:FC:A3:93:15:1F:80:EA:0C:06:CE:11:81:AA:82:63:F9:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1/9e71e72a-ad5e-3b1c-ae3f-947f2898e30c.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     62611
IP address blocks:        23.179.80.0/24 maxlen: 24
                          192.43.215.0/24 maxlen: 24
                          192.124.29.0/24 maxlen: 24
                          204.107.81.0/24 maxlen: 24
                          2602:fd16::/32 maxlen: 48
                          2620:b3:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1/8255b0dd-111a-4baf-be90-57b40f505cd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1/8255b0dd-111a-4baf-be90-57b40f505cd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9c:38:ff:7a:84:8c:8b:77:b1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8255b0dd-111a-4baf-be90-57b40f505cd1
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=4ebe365f-e049-43b3-bd6f-40bda8a4743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:ac:8f:5b:65:86:8d:65:79:be:8b:92:cc:
                    e3:6a:a2:7c:44:e5:5a:44:a8:95:1b:1c:af:3e:8e:
                    ff:eb:c1:c4:2b:94:96:42:da:7b:53:6b:d7:28:0e:
                    06:8c:7d:e2:e0:93:f9:54:ba:92:c1:0d:f5:58:15:
                    69:02:ce:80:49:32:c2:2d:eb:c3:f7:d0:a3:b3:6c:
                    be:8a:82:87:a0:bb:7e:11:cf:28:b1:9a:c3:a6:c7:
                    c9:de:07:ff:b2:fe:e8:83:15:f6:fd:62:5d:a3:e0:
                    c8:18:a4:87:38:c1:85:a7:31:f6:ca:5d:2d:9c:05:
                    b2:76:89:59:c0:e2:7a:fc:b7:b1:22:06:24:48:09:
                    f4:97:dd:3d:29:18:21:f1:87:fc:5b:de:6b:23:66:
                    c9:bd:3e:54:f9:77:dd:e8:1b:6a:d0:23:cf:29:81:
                    bb:0c:9d:7e:a0:7c:98:17:b8:b1:94:cb:51:85:f1:
                    5b:ee:aa:bc:c1:a3:02:11:85:20:f8:42:eb:c9:75:
                    1f:30:db:5f:d3:eb:7e:14:7f:3e:2a:6b:36:89:62:
                    cb:8a:1d:9b:0d:9c:7c:ca:24:e0:02:b8:22:da:ed:
                    af:26:08:2a:08:75:5a:dc:39:62:b3:91:23:2c:41:
                    9a:1e:47:c6:f3:57:03:2b:50:b1:7a:a2:66:e8:13:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:23:76:59:7E:06:15:2B:AD:6A:76:DD:A7:DE:27:53:E3:3B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1/9e71e72a-ad5e-3b1c-ae3f-947f2898e30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1/8255b0dd-111a-4baf-be90-57b40f505cd1.crl

            X509v3 Authority Key Identifier:
                keyid:B4:E0:4F:FC:A3:93:15:1F:80:EA:0C:06:CE:11:81:AA:82:63:F9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8255b0dd-111a-4baf-be90-57b40f505cd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.80.0/24
                  192.43.215.0/24
                  192.124.29.0/24
                  204.107.81.0/24
                IPv6:
                  2602:fd16::/32
                  2620:b3:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:db:bf:76:e6:5b:13:8a:1a:1b:58:38:4f:01:dc:fc:7f:
         32:11:53:dc:78:c5:d2:ba:c3:87:d8:bd:eb:c0:e7:1a:be:82:
         52:b7:13:54:d2:02:af:da:5b:76:80:b7:22:3b:4d:2e:cb:7b:
         1f:27:65:81:e1:53:10:32:ad:ec:13:05:26:e2:a9:41:2a:7b:
         c6:3e:2c:c4:b7:f4:e8:e3:d9:2e:53:14:50:35:98:b0:0b:4e:
         00:5f:ec:cf:8c:f0:f0:6f:ad:d0:61:05:6d:e9:fe:ca:b7:f7:
         b0:22:98:9a:e1:93:31:59:6b:55:98:db:ae:0d:27:87:0b:46:
         6c:82:20:e4:64:48:77:ce:8a:2f:44:82:28:33:2e:5c:ec:33:
         d2:9b:42:98:7a:c9:b2:e9:63:31:15:2a:5a:e5:15:43:c3:08:
         e7:db:9c:a1:04:05:c0:7c:22:04:3f:33:d7:66:2f:aa:50:25:
         15:80:c3:00:7d:d6:77:5c:bf:7e:72:42:c8:5d:73:5f:e5:e3:
         95:65:37:11:c3:ae:fb:73:da:67:65:2b:98:cd:1c:ec:a2:5d:
         85:6c:68:f9:01:47:16:f4:a3:7f:a0:ae:d0:c4:19:cf:b0:ea:
         5a:70:80:6e:6f:3f:6e:ff:00:3e:bc:b1:c4:07:40:f6:7c:ca:
         cf:96:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:27:02 2025 by rpki-client