Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7ba1305e-362b-3d0a-b35d-d6d1c50e21e5.roa
File:                     7ba1305e-362b-3d0a-b35d-d6d1c50e21e5.roa (raw, json)
Hash identifier:          RRHLprn6Yi9aSkZCQJZJRe9Il3Zw0fTfTMcvvSxKyC0=
Subject key identifier:   EC:20:7D:C8:5B:F6:13:84:19:D4:3F:5D:BC:D1:C1:28:AF:39:8E:C4
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584A4C7FDA2C5978EF6DB04DF500
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7ba1305e-362b-3d0a-b35d-d6d1c50e21e5.roa
Signing time:             Tue 24 Jun 2025 15:19:48 +0000
ROA not before:           Tue 24 Jun 2025 15:19:48 +0000
ROA not after:            Mon 22 Sep 2025 15:19:48 +0000
asID:                     397437
IP address blocks:        65.183.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:7f:da:2c:59:78:ef:6d:b0:4d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Jun 24 15:19:48 2025 GMT
            Not After : Sep 22 15:19:48 2025 GMT
        Subject: CN=fcb3c681-c7ec-460f-96c6-1b4aeddd362a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:79:0e:ce:41:82:f8:81:1a:5e:ba:67:be:
                    5f:76:8a:50:11:9c:cc:93:40:d9:c4:a8:cb:90:a2:
                    eb:bc:04:3e:f0:c1:b1:66:fc:13:c5:b6:93:bb:cf:
                    0e:c8:0d:07:5d:2e:9e:21:8b:37:fd:be:43:8e:53:
                    72:4f:10:29:9a:3f:a1:cc:b4:ab:e3:52:92:e6:d0:
                    39:51:28:d3:38:83:62:0f:8f:5f:ab:8f:bf:49:c4:
                    2f:72:73:a7:de:be:bd:c9:00:07:a1:a0:4c:93:97:
                    f9:47:9b:3a:8a:5c:db:47:b0:6f:1f:72:0c:23:08:
                    93:f6:39:f9:6f:28:08:f4:fe:90:8a:23:bf:6f:68:
                    39:39:f0:18:f1:0e:b6:1c:2c:64:ac:78:69:f9:13:
                    3a:be:da:03:71:7a:47:4e:83:19:51:6f:e4:b7:e5:
                    54:81:3b:5d:38:8f:76:ca:0c:ab:15:ea:bf:47:33:
                    46:6e:bb:8c:e4:35:d7:65:d0:fa:b3:ff:2b:8d:86:
                    e3:be:19:a8:74:53:65:d4:df:5e:38:f6:4f:43:21:
                    23:6c:26:1e:9c:ae:b2:a8:0f:43:60:62:f3:2f:36:
                    01:48:a7:6b:34:13:0c:52:e7:b6:20:41:63:a6:03:
                    dd:f4:23:76:6a:0b:f9:3d:a1:13:fb:d9:1a:6d:9c:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:7D:C8:5B:F6:13:84:19:D4:3F:5D:BC:D1:C1:28:AF:39:8E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7ba1305e-362b-3d0a-b35d-d6d1c50e21e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:f2:46:96:91:20:74:0d:48:4e:39:aa:b7:3f:58:db:9a:
         4e:c9:77:f8:64:fc:e1:e9:c7:9f:71:b0:20:30:ad:a0:61:ee:
         59:89:ae:e5:9f:70:66:e6:be:c6:9a:35:a0:af:4e:8d:29:ef:
         37:2d:52:08:a8:db:67:c0:3d:b0:93:b4:e2:28:a4:ce:d4:74:
         25:b5:f2:be:3a:14:d5:62:44:d3:29:e1:21:5e:72:c0:0f:b8:
         ad:df:3a:48:00:bc:79:07:f2:e4:56:d1:90:72:1c:f5:6d:3f:
         b0:59:8b:00:e0:72:67:3e:d0:d5:5d:07:fe:0c:e2:3f:59:1b:
         d6:0c:1f:4f:17:55:7a:bf:47:1a:24:5b:9b:e8:8e:0b:6f:0e:
         b8:6c:9f:f9:d0:7d:ce:42:79:d7:b9:b7:3a:3c:b3:17:6d:14:
         69:c6:0f:50:27:56:72:85:49:a6:7b:a5:cd:f7:40:1e:ec:d9:
         9a:a1:bb:3b:51:12:73:78:2f:ae:fb:8d:38:8e:43:24:b2:e2:
         00:60:9b:7e:df:62:63:82:0a:96:eb:6d:58:c3:11:b2:e3:fd:
         b7:ae:bf:42:0f:6b:26:7e:33:c1:c2:fc:30:54:e5:fc:be:3a:
         fd:25:fd:66:a2:92:41:6e:92:68:64:c4:b0:c3:60:71:47:97:
         8b:04:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:18:57 2025 by rpki-client