Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/10a51308-df1a-3745-b193-aa773f383acc.roa
File:                     10a51308-df1a-3745-b193-aa773f383acc.roa (raw, json)
Hash identifier:          lLniHN5aZlCFs7MlJ7eJMRbZbF8eMyByksR1s+dWgHM=
Subject key identifier:   40:62:E9:57:9B:32:34:F3:C5:34:0C:C6:A7:89:22:0C:13:3A:3A:BD
Certificate issuer:       /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial:       010D0C9F4328584AC8764DC38058CCD27D8061C0
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/10a51308-df1a-3745-b193-aa773f383acc.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     399794
IP address blocks:        149.112.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4d:c3:80:58:cc:d2:7d:80:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=1850e1ac-d02c-4034-8686-d5387d8771ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:b2:48:02:f8:aa:dd:ae:ec:26:51:fc:7e:
                    09:8b:d0:61:42:69:2d:fe:02:16:2b:3d:be:96:4b:
                    a5:cd:5f:48:42:6e:9e:34:da:e2:82:05:87:cf:71:
                    7c:fd:e6:c2:4a:75:8e:46:9c:8a:9e:6e:97:ea:82:
                    58:48:15:6e:45:39:2c:52:a6:18:4c:df:22:8b:b8:
                    aa:4f:42:aa:df:8a:8b:33:cb:58:dc:c6:4b:cb:0d:
                    cf:80:bb:ae:89:31:bf:86:98:bd:12:cf:8b:ae:a7:
                    30:67:96:80:63:ea:26:43:c0:61:27:6a:5a:b9:b8:
                    54:59:20:a1:e3:b2:68:aa:9b:33:9d:80:2f:b0:a0:
                    3a:d5:0b:06:a3:e2:da:d3:44:7e:7b:ff:54:80:46:
                    09:95:2b:ce:92:ec:ae:d4:ca:72:19:7f:85:1d:f0:
                    f8:96:26:5a:75:04:8d:36:ff:46:21:03:dc:cf:f5:
                    8c:5a:56:e3:1a:06:1a:9e:0b:cb:27:f3:b8:b5:ac:
                    1b:9a:b9:ce:aa:a0:6c:c8:0c:ce:52:91:42:95:ac:
                    30:55:d3:cf:5e:87:7c:f6:e5:c0:82:51:a1:a0:cb:
                    5c:40:dc:13:62:bd:bc:1b:03:0c:fb:82:f5:31:c8:
                    be:be:a1:80:f0:9f:16:ea:8c:a3:c8:03:af:1a:f9:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:E9:57:9B:32:34:F3:C5:34:0C:C6:A7:89:22:0C:13:3A:3A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/10a51308-df1a-3745-b193-aa773f383acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl

            X509v3 Authority Key Identifier:
                keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:07:ad:4e:07:7b:52:92:fd:ed:12:5a:d5:76:51:99:7c:
         47:1b:db:2b:03:e1:02:52:02:e0:e7:1f:26:27:f9:b7:38:0b:
         df:81:72:ac:76:3a:8d:fa:02:45:29:79:1e:c7:d8:0d:7b:b0:
         e9:95:64:80:bb:d8:00:21:4d:95:45:51:2e:c6:3e:f5:69:87:
         7d:3c:11:9c:6c:c5:85:91:21:bf:fd:93:01:43:30:bb:0a:56:
         5d:ab:b5:b5:bb:dd:8e:d0:81:49:e6:a2:0d:04:18:43:8d:58:
         36:40:91:58:53:f2:d2:fa:be:f0:ea:70:b6:0f:9f:08:dd:60:
         06:8b:25:70:bc:b6:88:07:67:d2:dc:d5:68:c9:b0:7a:b9:3f:
         0d:49:a5:e2:f2:31:e6:47:2b:33:43:da:b7:d3:3b:7f:62:84:
         3a:ce:e8:33:eb:77:01:a1:4d:41:fc:7c:06:ac:0b:58:23:e8:
         a9:de:b6:a9:3b:cb:c3:5a:c0:ac:d4:5e:98:34:84:9a:67:e7:
         4a:0a:84:ee:0e:85:f5:dd:96:1b:b1:bd:59:7a:ca:71:b9:90:
         0d:7a:ba:37:09:ec:fd:9c:05:cb:99:e9:62:ee:d3:4f:11:42:
         e6:83:3c:5d:7c:37:3f:3e:35:89:0d:93:9e:f0:a0:09:c1:21:
         c0:b3:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:44 2025 by rpki-client