Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa
File:                     8806f017-bb65-315a-9c2b-a0754dc20c8a.roa (raw, json)
Hash identifier:          cReJ4QBek2tcro/oG4Ntp7YDbq+ONfC2ebJV/jr2Qbw=
Subject key identifier:   C2:B2:F8:C2:34:C7:2F:2F:3A:D0:E3:3D:90:83:AD:72:7F:4F:21:C6
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584ACE0B903536E62776211E1440
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     207134
IP address blocks:        131.153.40.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:90:35:36:e6:27:76:21:1e:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=6b26f16c-74e2-4fee-b376-d1e2dff73dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:e5:be:68:63:30:ec:30:7d:89:a1:b2:e2:
                    9c:3b:a1:4a:50:7f:11:e0:88:44:bf:5b:3a:ff:42:
                    83:24:fb:f7:12:1d:1f:0f:f9:0b:37:7f:8e:a9:ea:
                    ae:57:92:5d:cb:92:f7:d5:cb:88:74:38:3a:b8:38:
                    76:19:d8:ef:34:69:d4:b3:de:68:aa:85:99:2d:85:
                    29:66:49:e8:f7:7f:12:6c:0b:57:cb:ca:d5:9e:7d:
                    8f:93:80:11:bb:3d:d4:e0:54:bc:97:60:98:7b:b3:
                    a4:03:2d:6f:9c:18:11:18:3f:02:8b:43:48:7f:9c:
                    96:d8:50:d2:d3:0d:aa:0e:c6:e4:16:58:60:6b:c6:
                    15:ab:34:14:cd:64:d4:b4:42:58:0d:7d:7c:23:5d:
                    33:2e:90:cc:35:34:7a:8b:aa:54:d0:c4:26:f7:73:
                    f9:7a:45:44:81:2c:35:fd:86:da:f5:6e:d3:68:1c:
                    40:b0:25:67:33:6b:96:93:3e:22:00:44:12:44:aa:
                    3f:96:56:95:92:45:2b:bf:e8:c4:e6:7b:a0:3b:4a:
                    ed:e3:7c:95:b8:dc:8d:72:a5:a6:d4:d9:3d:af:4e:
                    a6:6a:a8:3f:e8:6c:78:cf:be:00:aa:ab:33:0d:6b:
                    76:0e:6f:6d:00:2f:30:62:da:08:08:85:c5:36:5d:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B2:F8:C2:34:C7:2F:2F:3A:D0:E3:3D:90:83:AD:72:7F:4F:21:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:24:d3:7a:d8:0f:2a:6c:12:64:1c:b5:3c:e5:2b:e2:2c:b6:
         39:70:0d:49:fb:e1:cb:0e:32:7c:7e:a7:39:76:b2:b4:7a:67:
         73:1f:d9:84:7d:c1:a2:dd:79:fb:5e:fb:45:17:bb:52:73:8b:
         5b:e4:2a:f8:c7:b9:c3:1b:19:e0:e1:90:7b:b6:40:ed:48:7e:
         4c:ff:1a:83:e0:55:63:d7:a0:c5:08:40:03:15:4d:47:da:aa:
         d1:10:9f:ca:10:d3:27:0f:2c:0b:f5:12:45:fd:75:66:26:fe:
         0e:0f:da:49:40:2f:56:aa:d1:12:28:6f:7c:fa:54:56:e2:7d:
         fd:a0:81:6c:54:e8:4b:01:3f:db:db:18:6f:84:5a:fb:87:4a:
         4c:9f:1d:18:58:1f:e6:1c:5a:06:53:fd:60:5f:9a:24:38:4b:
         98:85:81:ff:16:27:34:ee:1a:e7:90:23:7a:ad:67:c1:ab:07:
         1b:78:22:93:5b:d4:e0:a1:d7:fc:a7:1d:02:b2:48:4f:37:eb:
         c3:69:be:78:ce:2c:99:51:cf:32:7d:cc:16:cd:ec:51:6e:7f:
         f3:73:0c:88:4d:61:5e:4a:c5:12:38:c5:77:01:41:ed:b9:55:
         ea:23:c1:47:c2:f5:1c:fb:9a:db:2a:09:c7:74:2a:50:3c:69:
         39:2f:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:40 2025 by rpki-client