Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c027ed7-ef0f-33a3-8bb8-b324d88fdfcd.roa
File:                     7c027ed7-ef0f-33a3-8bb8-b324d88fdfcd.roa (raw, json)
Hash identifier:          535GovG42l/s0KU9Fo48HXzZAod3Z/R4OflDnuF33fA=
Subject key identifier:   50:94:81:53:A3:F8:15:F2:A0:A6:8A:FA:BD:8F:0C:8D:AA:8C:79:0C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970707D3B3601377CDFC40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c027ed7-ef0f-33a3-8bb8-b324d88fdfcd.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        184.150.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:07:07:d3:b3:60:13:77:cd:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d3aa7007-de2d-4989-a155-2236e3d09c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:18:7b:72:41:df:08:ef:d3:09:82:13:87:
                    90:3a:92:cd:2f:c7:39:be:88:7c:1f:80:23:ec:10:
                    e4:cc:12:9c:ba:28:66:89:91:f2:4f:71:88:93:63:
                    6f:70:5e:2c:04:a3:79:e5:e6:25:a2:8b:d1:74:52:
                    26:bf:a9:c7:c4:91:22:b0:4e:ed:ad:45:f8:a8:31:
                    e3:bd:6e:48:3e:ca:7d:8f:8d:a2:62:22:a7:e9:52:
                    ad:c8:76:da:2a:a6:9f:84:2f:ba:9b:ce:5f:83:69:
                    d8:c8:63:9c:ab:92:03:d8:69:01:e7:63:eb:f0:11:
                    6a:b9:7e:4b:34:32:9d:ba:ec:4a:0d:d6:06:18:2a:
                    68:06:75:db:70:3b:62:7b:a2:4a:5e:9f:56:42:e9:
                    78:ac:f8:a5:5b:20:9d:4e:b7:e9:3e:b7:45:3e:23:
                    2f:3a:87:56:c5:7f:42:15:6a:86:c4:1a:1c:c4:4c:
                    6e:5a:f2:45:bd:71:6e:23:31:c8:11:a5:02:82:6b:
                    0b:b5:a3:14:9d:fb:c2:f3:e2:6a:b1:32:02:d6:09:
                    02:c9:ef:77:64:cc:85:b9:aa:0d:13:73:7e:45:94:
                    e5:a8:77:2d:43:e3:62:7e:58:73:30:e0:55:b0:a9:
                    a8:b0:e3:8f:ce:fe:82:38:0a:70:e4:19:6e:03:b5:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:94:81:53:A3:F8:15:F2:A0:A6:8A:FA:BD:8F:0C:8D:AA:8C:79:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c027ed7-ef0f-33a3-8bb8-b324d88fdfcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:fb:3d:f6:4d:5c:09:5f:59:e9:a5:92:56:3d:bd:37:d8:
         81:e0:73:b8:00:f4:8f:20:69:dd:c6:43:bb:d6:b2:b4:05:1f:
         86:6c:13:fd:a3:81:c0:dc:8b:40:cc:5d:72:6d:6d:8f:fb:30:
         cd:a3:73:fd:d3:a6:e8:39:cb:f8:a4:74:7b:f2:c1:e0:21:dc:
         1c:88:61:c5:29:21:b0:42:06:1a:42:5e:ab:88:f8:a9:08:e6:
         50:dc:9c:6c:5b:60:d9:98:dd:2c:8c:10:22:8d:f3:8a:81:f2:
         30:48:53:5d:4b:cc:53:e4:8a:3a:f0:d7:8b:9b:8e:f6:4a:31:
         e4:dc:62:30:eb:1e:11:8e:92:a8:22:a7:c0:5a:ff:2f:36:ae:
         2a:eb:f4:6f:50:7d:89:aa:72:76:52:69:54:4c:18:4a:87:d8:
         ce:b9:fb:c3:24:8e:f8:cb:75:cc:4f:6c:c3:25:3f:a6:4a:f0:
         e5:d1:db:05:42:31:bb:96:ed:80:4c:59:e0:bb:42:06:b6:b4:
         6f:bc:88:ee:be:57:b2:1a:cc:57:b3:13:d4:80:46:33:5e:49:
         0f:a7:bd:90:92:5d:46:42:66:f6:e7:c1:7a:e2:fe:4f:50:d0:
         07:0f:3f:80:2f:79:fc:79:8b:ee:d4:54:e6:7c:f0:8d:27:03:
         94:c9:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:39 2025 by rpki-client