Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4febd82-2aae-3975-999b-aea60d7d3108.roa
File:                     d4febd82-2aae-3975-999b-aea60d7d3108.roa (raw, json)
Hash identifier:          P/EwtSm8MPEssNgLksBUqBFCbFEoIxv4WGzTZT1m2wA=
Subject key identifier:   D1:22:C7:B3:7E:A8:E1:74:C6:FA:DB:27:1C:56:B4:06:42:F0:BE:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE196B6311BAD31F6ABEECA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4febd82-2aae-3975-999b-aea60d7d3108.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        184.29.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:b6:31:1b:ad:31:f6:ab:ee:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=05f2cdb7-8cdb-4c5b-9259-7e92b4b75623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:e9:8b:55:b4:04:fe:97:6a:c9:1b:e4:be:
                    a4:9c:d4:a3:c0:e1:3c:c3:9c:4e:d0:26:1e:b3:a7:
                    85:ab:05:55:f0:c2:52:20:47:1f:48:49:0e:5b:42:
                    26:a3:d3:47:b1:80:9b:1e:ef:32:18:ed:4b:0a:00:
                    7b:73:8c:a8:d6:e2:af:41:3c:d7:34:72:83:15:73:
                    5f:9b:73:59:bf:1a:d5:ae:33:11:d8:2b:b5:39:ab:
                    27:8a:e2:cc:d0:13:ce:de:e7:52:df:11:aa:9f:f7:
                    c3:fa:d3:4c:85:e9:cb:a3:23:4e:0c:8e:30:a4:ac:
                    19:63:8f:36:a3:95:17:47:58:89:10:b4:8e:20:75:
                    c1:9a:75:88:a1:27:5d:19:99:9e:59:dd:fc:b7:f1:
                    d9:43:71:d3:97:7b:a8:7c:75:65:7b:07:8b:5b:ad:
                    e4:f6:9d:cd:bd:d7:4a:24:aa:d1:5f:15:c0:d9:36:
                    e1:e5:88:fe:45:6f:3e:c8:8f:59:4d:d8:ce:a4:20:
                    9e:9c:58:80:6b:c8:30:60:cf:44:42:76:8c:a3:31:
                    5b:b6:43:39:51:11:99:66:73:8a:9c:f1:5c:31:01:
                    cf:cb:2f:ae:ce:e0:d2:7c:31:ae:55:46:6f:d3:62:
                    1d:f7:15:b0:8e:bb:69:1e:b7:e8:6e:81:b2:73:f7:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:22:C7:B3:7E:A8:E1:74:C6:FA:DB:27:1C:56:B4:06:42:F0:BE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4febd82-2aae-3975-999b-aea60d7d3108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:81:5d:1d:3c:45:b4:db:70:16:37:8d:b8:6b:ac:1d:10:
         66:70:6b:1f:d5:e9:42:81:7d:df:4e:1f:62:c3:2a:ea:68:0b:
         53:4b:fa:0d:a6:c6:31:82:c6:2d:00:7d:ce:d6:9e:7f:8c:7a:
         71:58:c9:94:e6:a8:eb:18:ea:19:ad:c1:49:22:85:55:f5:e2:
         51:b2:af:ef:15:a6:c5:07:f9:d1:9f:70:ae:0a:27:8f:6f:51:
         ba:e4:58:16:b8:86:bc:55:7b:1b:73:99:5e:aa:07:de:f5:ce:
         12:0b:6a:ae:a5:f9:1c:ff:c0:71:3d:19:7e:d6:77:4d:43:99:
         66:d5:d5:ca:39:65:c4:23:1d:7a:15:39:80:a1:cf:3c:eb:5e:
         ea:2e:ef:39:a5:54:a8:3e:99:db:04:50:cf:6d:c2:2c:91:27:
         ef:ab:7a:ed:5b:05:0b:83:49:a8:b6:25:7e:63:d6:10:d6:0f:
         dd:32:b2:ed:f9:39:63:6c:70:7e:01:9c:47:9e:25:bc:36:72:
         3a:66:3c:3e:a0:d2:96:86:93:02:97:f9:55:a4:63:9f:3f:2e:
         09:4c:84:1a:ba:bf:e3:b6:6e:2a:b2:0e:83:b6:42:8f:c6:47:
         56:13:d0:ed:d9:72:1a:05:12:1d:17:aa:e5:d9:ee:13:49:3b:
         9c:1f:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:05 2025 by rpki-client