Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
File:                     4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (raw, json)
Hash identifier:          mOkYa5SPgs1fV+4CEZPSJMwcBP3VVhkylpVhT8YmK4I=
Subject key identifier:   51:0B:1E:A9:C0:33:04:ED:DE:99:DA:4B:C9:BB:A9:CF:1D:93:F4:9E
Certificate issuer:       /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
Certificate serial:       010D0C9F4328584AECC14AA501876D02F9475E80
Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     395089
IP address blocks:        192.160.102.0/24 maxlen: 24
                          2620:132:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4a:a5:01:87:6d:02:f9:47:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=1afc034a-49f0-4b2c-ae64-a348ab87452f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:07:71:7a:6b:57:1d:a3:1c:91:9d:b9:39:
                    7a:11:0d:c5:25:77:be:35:a0:2b:59:70:0f:3a:b2:
                    42:c5:45:36:2f:e2:0b:47:68:09:21:ba:cc:b8:63:
                    24:07:91:17:db:05:ec:01:b8:ca:f3:df:19:90:ed:
                    29:7f:5a:20:4f:9c:0c:b7:59:f9:04:dc:a5:08:15:
                    33:3c:9e:2c:34:5f:41:1e:81:f9:30:b3:c1:e0:b9:
                    c7:8a:a2:21:e4:96:bd:2f:71:bc:1c:cf:fd:96:04:
                    9c:12:2c:be:b5:c9:89:55:6c:d1:f9:f4:92:f0:0b:
                    51:d9:08:14:92:51:6e:40:a7:9c:24:c8:a3:5f:b4:
                    f6:1b:3c:46:1e:b1:eb:48:c6:bb:52:26:c1:42:91:
                    f4:7f:f2:69:bd:0f:39:4a:54:64:16:b2:6f:d6:cf:
                    78:37:26:ef:28:f4:3f:90:ad:1b:97:7e:1c:62:dc:
                    e9:63:82:72:b3:fe:2c:2e:b8:7e:c6:06:69:ef:33:
                    2c:ce:4a:f3:3e:4c:db:0e:1b:5e:98:59:af:66:84:
                    75:78:7c:cd:7c:a0:d2:cb:4d:24:15:50:5c:97:f1:
                    88:98:af:4f:d7:ed:46:93:aa:de:8e:2b:46:75:5e:
                    ed:25:4e:4c:79:41:79:ed:0a:3d:12:6d:5e:16:da:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:1E:A9:C0:33:04:ED:DE:99:DA:4B:C9:BB:A9:CF:1D:93:F4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl

            X509v3 Authority Key Identifier:
                keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.102.0/24
                IPv6:
                  2620:132:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:9d:be:70:ed:cb:c9:97:8d:9f:47:8e:48:85:81:2a:1e:
         b0:b7:52:01:46:f5:23:09:88:3d:2e:c7:44:35:c4:7a:41:43:
         39:7d:f9:36:d4:a1:8b:ed:9b:d7:16:b7:aa:f5:12:e0:db:cd:
         ed:5f:0f:07:8b:70:d9:b0:6c:a9:df:46:b4:07:fe:00:bb:a5:
         a5:f7:ea:20:e2:e1:b3:b7:c4:e1:0f:ed:da:60:38:c9:f0:a9:
         6d:25:83:b4:89:7e:e2:a5:09:39:21:3e:6d:99:0a:d0:69:a9:
         f4:74:dc:d3:cf:a9:2f:0b:f5:f4:4e:3f:76:85:5e:0b:59:50:
         fd:bb:54:6f:9a:85:2d:80:ff:de:bd:2f:d6:6d:b9:bc:a4:96:
         e3:aa:d1:d2:2e:56:15:c0:fe:12:38:81:2d:1c:df:ee:38:23:
         e7:01:ff:79:3d:d1:c3:43:fb:48:06:e2:86:f8:32:c2:50:db:
         00:5f:39:9a:78:83:70:f8:6e:c7:fd:a0:40:45:9b:e2:96:6d:
         35:9d:af:0e:6f:70:80:f2:5e:3d:3c:e0:15:96:17:04:0a:f2:
         2f:d4:76:77:82:53:39:fd:9a:4d:97:30:a3:39:e2:6d:fd:fc:
         90:f1:0b:90:74:1e:40:a4:de:32:b6:81:3f:70:ce:29:e6:e8:
         39:6f:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:42 2025 by rpki-client