Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ef928c1c-6010-3489-9b76-56b4466cf6e7.roa
File:                     ef928c1c-6010-3489-9b76-56b4466cf6e7.roa (raw, json)
Hash identifier:          y7rUT/3hFFyZOt1ZwTV/HejIMWFiz29ot5fmJtLwV3s=
Subject key identifier:   47:5E:C3:9F:72:A4:19:D7:4A:76:71:4C:6B:8B:08:57:12:3D:D8:EF
Certificate issuer:       /CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a
Certificate serial:       010D0C9F4328584ACF70F98CB94428B28D571700
Authority key identifier: 2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ef928c1c-6010-3489-9b76-56b4466cf6e7.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     393906
IP address blocks:        172.81.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:f9:8c:b9:44:28:b2:8d:57:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=e5d6a706-36cd-4f2a-8726-40aed6d52c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:5c:4b:44:44:96:b4:9b:7b:21:59:7d:48:
                    ba:2b:67:bd:96:af:4b:6a:2b:62:ee:a9:fd:9a:d7:
                    05:97:b5:64:aa:ec:4f:09:dc:e0:6c:9d:05:76:9e:
                    b8:4b:c4:2c:b0:8b:61:e8:e1:7c:90:42:fa:9d:77:
                    05:55:dd:95:07:c6:9e:ad:44:e0:bb:dc:ad:b0:32:
                    df:df:7c:b2:5a:2b:fd:b1:de:71:e1:fd:fc:2c:a5:
                    c4:84:73:59:cf:52:95:03:57:1b:c2:2f:b4:41:e0:
                    e2:92:38:98:a7:95:3f:70:ec:64:34:dc:11:8b:45:
                    21:45:9b:b9:7b:53:53:43:f4:a1:80:bc:ab:f8:1f:
                    c8:a9:7f:a3:9e:d3:c6:59:cc:d6:50:57:d3:10:59:
                    d5:9c:00:75:c7:85:18:bd:a4:5a:a5:25:6e:aa:74:
                    f7:a6:d1:4b:9d:0f:33:7f:db:19:3c:f7:db:81:3d:
                    c4:b0:a3:ac:79:64:dc:1a:28:2d:b3:57:37:dc:90:
                    7c:06:44:61:42:d1:31:60:bc:c6:fe:d7:7f:7a:6e:
                    60:f7:65:12:d9:0d:8e:62:6d:db:fd:f2:38:df:a4:
                    b3:14:72:af:66:62:b6:58:bc:59:62:75:45:c7:0d:
                    1e:93:fb:47:05:84:f6:7e:40:09:e3:b6:c7:20:d9:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5E:C3:9F:72:A4:19:D7:4A:76:71:4C:6B:8B:08:57:12:3D:D8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ef928c1c-6010-3489-9b76-56b4466cf6e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:b3:d2:72:68:cc:5e:ad:f8:ce:54:df:bd:6d:27:a4:33:
         15:fa:7c:e6:aa:a4:65:43:8e:ef:23:08:de:b0:62:2d:25:70:
         51:60:b3:18:72:fc:54:04:b4:e8:d6:1c:88:c7:3f:6f:38:f4:
         53:b7:57:5d:5b:10:ac:6d:c9:01:d1:bb:c6:94:2f:06:0c:54:
         c0:74:65:66:15:a0:5e:d8:4e:b5:cc:76:bc:ce:12:a2:9a:a9:
         df:8b:db:39:2a:eb:1c:7b:75:77:c9:3c:9d:4c:17:73:16:71:
         e6:5b:1e:cd:c5:69:10:0e:96:bb:ed:f2:0d:35:bd:79:51:29:
         7b:cd:89:4d:42:43:14:52:b8:f8:96:98:d1:55:e4:c8:95:72:
         29:63:f7:a2:9d:09:bb:3c:d2:a9:f0:8a:82:14:40:79:0a:50:
         a9:a2:cf:43:c9:74:99:be:8a:32:f2:93:2d:4a:c0:43:17:0c:
         55:49:57:e0:31:d8:e9:1e:10:2e:8e:3b:72:15:e0:40:27:79:
         22:88:ea:07:8e:8a:83:5b:f5:c6:85:39:8b:47:ae:5f:a3:da:
         cc:c3:80:18:79:9d:52:ef:61:1e:36:aa:f4:dc:1e:76:f6:4a:
         41:93:43:9f:a0:62:5f:fd:d1:8d:34:a0:8e:13:e4:e0:4e:ef:
         23:f3:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:32:57 2025 by rpki-client