Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd4db662-bca7-3dce-9695-df92f1be39fc.roa
File:                     dd4db662-bca7-3dce-9695-df92f1be39fc.roa (raw, json)
Hash identifier:          1jAC45WS/263tQDlWpWgjnoRrrM+nFu48/v7SieCAsM=
Subject key identifier:   E0:1B:19:63:7C:4B:30:46:A8:1B:BF:31:D7:F8:3C:6B:96:DA:5D:9C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970F955FDD65924A682EC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd4db662-bca7-3dce-9695-df92f1be39fc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        184.150.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0f:95:5f:dd:65:92:4a:68:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b6afef76-17d2-4cf8-8593-384e0efa87d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:ae:a9:44:7d:d2:a3:92:fa:ed:b9:3b:9b:
                    1b:56:48:5c:67:2c:00:19:ad:25:5d:05:8a:93:a0:
                    2e:4e:ff:40:b1:c5:fb:fb:23:ee:01:ed:9c:c5:7e:
                    67:f6:d0:c4:08:bb:ba:45:c6:46:f1:6f:71:57:3b:
                    b7:1a:67:71:96:2f:e0:be:0e:a4:18:68:9b:70:55:
                    fd:41:7e:56:be:97:82:4c:bc:18:01:2f:56:29:3e:
                    a2:28:ff:89:74:42:03:41:fe:b0:58:15:1c:8f:8f:
                    ee:4d:f7:a4:eb:73:74:11:ec:59:82:93:30:4d:7a:
                    5f:bf:93:2c:dd:d1:a0:7e:82:48:5d:ca:42:cd:45:
                    35:4d:e7:81:4b:46:a3:6d:1b:39:ea:0c:a7:99:06:
                    bb:c9:5b:bb:28:22:90:e0:c3:02:bf:90:b6:f3:73:
                    bb:c0:a5:69:82:0a:73:74:6a:f7:0c:d7:0c:c3:20:
                    f0:56:a5:ad:4c:fb:95:73:5d:45:a2:73:4f:af:15:
                    98:b5:92:f6:30:71:87:c4:0f:db:dc:8a:4e:1b:91:
                    f3:0f:12:fa:d2:c2:99:ac:0e:4a:c6:a7:58:d8:9e:
                    6e:04:b5:17:2b:7e:25:26:ba:23:a4:7c:37:8a:84:
                    ae:46:9e:86:4f:db:b3:c4:78:46:d9:20:2f:74:48:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:19:63:7C:4B:30:46:A8:1B:BF:31:D7:F8:3C:6B:96:DA:5D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd4db662-bca7-3dce-9695-df92f1be39fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:a0:d5:86:06:e2:d6:6b:a2:90:d1:47:d5:bf:a5:d7:fb:
         cc:aa:8a:22:f8:2e:f8:02:29:f8:20:ff:ef:19:90:9c:cd:aa:
         c9:26:a5:ad:c6:3c:5e:f0:4a:51:2e:f5:83:42:45:ff:d1:6d:
         cd:f4:fa:76:d1:2f:90:53:3a:39:67:c8:32:ea:98:49:9c:27:
         16:cf:98:e0:ae:82:9b:cc:b1:d5:7f:54:c7:8d:84:82:ed:56:
         0a:73:36:4f:11:23:1d:75:e4:68:f8:81:89:ac:93:90:b6:72:
         26:6b:f7:75:78:25:12:bc:24:e4:c5:d9:a1:cf:00:da:d3:71:
         75:2e:f4:90:ec:d4:e7:74:8f:2a:c5:3a:f5:f4:38:06:24:15:
         92:1a:92:18:e4:70:7d:38:fc:df:ac:db:dd:b1:35:b0:3c:12:
         2f:c9:14:ce:ae:e0:57:7a:c4:fe:8a:56:ed:77:21:f1:ec:03:
         57:44:58:d5:f6:61:ed:03:23:ec:53:11:0f:a8:45:ff:d4:16:
         36:71:cf:de:83:2b:e0:0c:c8:72:58:f5:40:53:6e:45:6d:56:
         65:5d:f7:0c:03:1b:59:47:83:e7:3e:ce:50:2b:08:cb:96:1c:
         9a:7a:f6:d1:5b:8e:3b:f0:9b:2e:45:cb:6e:2e:e7:ef:ed:65:
         8c:26:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:31 2025 by rpki-client