Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/672d3c0b-83e3-3b4e-a532-d16c2e280e68.roa
File:                     672d3c0b-83e3-3b4e-a532-d16c2e280e68.roa (raw, json)
Hash identifier:          OuBjY25FncNjmtdsrsXpN6ML/VG6o4zwTtvzBv6HoGk=
Subject key identifier:   7A:02:C5:1D:93:65:4C:F0:62:16:03:E9:33:86:B8:8B:A3:D7:3A:FA
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584A4DA043965CFA4F0D41129900
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/672d3c0b-83e3-3b4e-a532-d16c2e280e68.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     64289
IP address blocks:        140.235.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:43:96:5c:fa:4f:0d:41:12:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=fc0c093f-1f42-4e33-aec4-57bf26414f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:e3:82:b3:2b:e6:7a:05:f2:bf:02:a9:05:
                    74:3a:da:d9:2d:6f:ed:26:5d:74:b9:3a:da:45:ea:
                    bb:a7:0a:94:e2:25:99:0b:21:01:1f:a2:dc:c9:d9:
                    c1:f6:15:91:33:c1:c6:85:ce:3f:d2:da:7f:c6:c9:
                    09:95:2a:04:66:43:de:da:e3:5a:82:96:87:ef:c5:
                    41:fa:b8:7f:cc:f2:a0:54:62:a4:93:46:ce:54:ea:
                    f7:68:f9:5d:16:b4:25:6f:18:96:f0:9b:56:6d:53:
                    8f:6d:bd:42:fe:53:9f:b2:04:16:01:e0:df:a1:09:
                    ce:10:e5:83:6c:9c:36:50:61:d7:63:b0:fb:6e:65:
                    70:b1:9f:52:9d:b3:35:b0:bd:0e:70:1b:3a:74:89:
                    ec:a2:0e:db:d7:a9:5e:be:5a:bf:34:a7:1d:74:b9:
                    52:54:46:3a:29:56:db:fe:d0:be:8a:74:92:dd:37:
                    64:4d:5e:b2:a3:dd:e2:bd:5f:94:07:56:2e:56:2e:
                    39:d9:c7:25:60:f5:d5:1e:ed:4d:1a:1d:51:7c:1b:
                    5d:a4:9d:a6:84:05:e0:7f:e9:2d:cf:7c:5f:38:0d:
                    8d:85:8a:28:f3:b4:bf:b3:d4:d0:5e:ac:b1:f9:26:
                    d9:24:b3:ae:a2:b0:00:18:a2:f5:c6:9f:48:ee:53:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:02:C5:1D:93:65:4C:F0:62:16:03:E9:33:86:B8:8B:A3:D7:3A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/672d3c0b-83e3-3b4e-a532-d16c2e280e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:df:55:ee:dc:b2:72:b1:a6:ac:69:d5:2c:84:e2:d4:93:bb:
         3a:6c:2a:3c:f8:27:3c:a9:31:7b:0f:91:7a:55:13:66:0a:4a:
         52:aa:12:91:47:d4:fa:5b:c4:38:a9:95:7b:f9:da:a1:92:1a:
         a6:2b:16:5b:53:c5:8c:b2:2b:27:94:3b:ce:04:f8:bb:02:6c:
         e8:59:09:c4:79:3c:4c:14:38:d9:36:63:cd:aa:44:6a:cb:f9:
         82:5e:d1:ac:9a:af:45:57:b2:11:c4:24:11:68:c3:8a:1b:22:
         e1:58:70:a8:04:f0:b0:28:77:73:8f:4b:d7:f8:89:58:d8:fb:
         d8:18:11:df:02:0b:fe:26:60:d3:b1:6a:66:42:c8:13:d6:0c:
         19:bb:89:35:61:07:c5:d6:74:28:65:9a:45:00:d1:75:84:d7:
         d7:40:8a:42:99:7a:bc:eb:8c:ac:12:3f:61:f9:4a:1a:2a:b2:
         72:6f:ab:8c:72:25:ff:de:a0:8d:05:bb:e6:9d:39:45:07:80:
         af:86:1e:62:5f:81:d0:06:f7:5d:c4:7c:a4:f2:f3:a2:ba:dd:
         a9:b5:5a:9e:b0:bf:be:b9:84:8b:25:01:e8:41:03:12:44:ee:
         13:ad:92:a0:9c:fc:e3:ae:c5:4e:13:ea:ae:71:e2:29:19:8c:
         92:4e:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:29:08 2025 by rpki-client