Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/194b14fc-c234-3539-b7d7-aed47b6088e6.roa
File:                     194b14fc-c234-3539-b7d7-aed47b6088e6.roa (raw, json)
Hash identifier:          LiuL7b9M3jL3P3r9uJoeEDSt5VKihalG/Y6vPUQha9s=
Subject key identifier:   74:15:BC:14:F0:42:E3:58:9F:B9:9B:C2:91:C8:06:9C:91:10:86:88
Certificate issuer:       /CN=8bd1b35c-fcc3-47f0-a438-7db79649daba
Certificate serial:       010D0C9F4328584A4AD58CB304C0680644833680
Authority key identifier: 7C:F2:44:81:D5:49:B7:54:AE:55:81:A0:34:A4:3E:0E:A7:36:9C:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/194b14fc-c234-3539-b7d7-aed47b6088e6.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     18515
IP address blocks:        129.107.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/8bd1b35c-fcc3-47f0-a438-7db79649daba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/8bd1b35c-fcc3-47f0-a438-7db79649daba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8c:b3:04:c0:68:06:44:83:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd1b35c-fcc3-47f0-a438-7db79649daba
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=5c4db80a-1e7b-4b82-a2f8-9bec467a3bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:e3:7f:15:ae:39:c6:43:d9:f7:73:af:fd:
                    7e:25:8f:d0:aa:58:66:cf:6d:0e:b4:70:ed:32:7b:
                    07:1f:f4:26:68:d9:b7:1a:df:51:9a:6f:27:68:37:
                    ca:be:65:a3:31:6c:4a:f7:d0:4c:28:c7:1a:b9:62:
                    86:c9:90:ca:a7:2e:93:8f:08:f8:4d:3e:89:58:da:
                    46:d0:c4:e7:10:e4:3a:68:f0:91:80:0f:a4:45:36:
                    ed:7f:ea:06:64:bf:45:c9:17:bc:63:6a:fe:04:bd:
                    6f:9d:49:fa:a6:ae:88:b9:42:77:2b:1e:a3:fb:24:
                    45:08:3c:a2:35:71:0d:9b:43:27:21:8b:27:1a:fb:
                    e0:27:5c:21:cf:6c:af:6d:21:58:27:2c:75:9b:94:
                    47:76:fb:e1:55:b6:c4:2a:85:68:7f:f3:ae:3d:00:
                    02:9c:db:1e:34:55:f4:80:d6:c4:2b:ac:32:0a:c0:
                    74:9f:8b:28:5f:8b:ce:1e:cc:d3:a9:84:12:bc:50:
                    f3:4e:aa:d0:5f:91:3a:01:c0:00:1e:06:c7:54:87:
                    35:57:d8:eb:a7:21:2a:bb:ec:ef:ae:bf:63:25:35:
                    d2:74:50:ff:cc:60:32:8e:84:f4:d7:5b:a2:21:f8:
                    73:d5:78:fe:27:a4:ed:53:83:e9:ac:90:2d:2f:99:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:BC:14:F0:42:E3:58:9F:B9:9B:C2:91:C8:06:9C:91:10:86:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/194b14fc-c234-3539-b7d7-aed47b6088e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/8bd1b35c-fcc3-47f0-a438-7db79649daba.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F2:44:81:D5:49:B7:54:AE:55:81:A0:34:A4:3E:0E:A7:36:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:22:fb:55:12:0b:77:53:df:42:08:0a:12:48:a6:a8:48:
         32:8c:b5:fb:c8:76:aa:60:b4:56:39:e5:c5:70:5e:ab:da:42:
         f9:fd:d8:09:ef:b4:70:ab:59:40:99:31:1e:39:66:21:70:19:
         52:f6:ae:c3:45:ac:97:5c:91:ab:49:b9:f3:1c:13:5c:49:ff:
         34:7a:14:30:73:d3:80:e9:e6:8e:da:30:e3:ba:a8:5e:69:87:
         35:1c:81:0c:8e:09:ba:76:36:d9:1c:6a:f3:e0:ae:a5:ca:75:
         08:c7:0b:bd:b8:0e:3d:87:57:b4:b1:16:94:8b:f2:16:d5:e7:
         28:47:50:49:d7:d5:3d:4b:ed:ea:ec:5d:6d:95:40:2b:c2:56:
         e3:24:2a:27:07:20:39:67:c2:3d:3e:cd:29:35:84:47:05:24:
         81:5e:e0:6c:57:58:43:bf:f2:2c:34:0e:0c:72:3e:ae:91:f0:
         ea:c6:00:d2:15:e3:c5:f0:8d:a6:08:ca:16:24:62:96:78:5f:
         0f:f4:a6:96:76:fe:10:c9:f5:e2:11:40:0f:62:51:a7:75:0b:
         74:63:58:c2:73:2c:ec:b7:04:06:3f:b3:cd:e2:14:42:61:55:
         32:4d:3b:30:2f:a5:a5:ff:cf:ce:78:04:c4:7e:f8:bc:c2:1e:
         cb:99:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:40 2025 by rpki-client