Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/839eb910-1a14-3f61-997c-f800091ddd13.roa
File:                     839eb910-1a14-3f61-997c-f800091ddd13.roa (raw, json)
Hash identifier:          lHb7T5M25nw6N9LM0TZHJ0/PeO+yn1L4+ZTx07wCK3c=
Subject key identifier:   AB:34:B3:0D:EC:6E:5F:BB:8B:01:CE:E8:72:1C:DB:EF:54:F5:EA:80
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A3FAADBD1F285F785A539E6C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/839eb910-1a14-3f61-997c-f800091ddd13.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     54538
IP address blocks:        169.224.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:db:d1:f2:85:f7:85:a5:39:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=efe583f8-c7a4-4cef-b316-d658c66d4986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:af:09:f5:3e:8f:c7:90:36:60:3e:67:6b:
                    d1:61:20:d1:15:1c:24:f5:94:52:f5:99:6e:f5:83:
                    d6:dc:85:91:42:c3:54:f4:70:a1:01:76:71:cd:6d:
                    c3:15:8b:b4:4a:86:bf:a3:4f:26:d3:9e:11:1a:8d:
                    85:29:86:bf:85:c3:dc:17:70:ba:5c:43:8e:e9:d8:
                    2c:21:e9:cb:68:71:8a:9f:7b:9c:9d:d6:c3:a1:18:
                    1d:53:9c:c6:c6:8d:ed:a0:8d:21:d8:8c:03:30:7e:
                    71:8a:13:2c:22:c9:24:4b:22:f9:92:96:37:00:e9:
                    b7:60:e3:46:94:09:98:c5:96:d5:da:46:ed:cf:92:
                    fc:4c:bb:d2:f6:52:47:0f:01:78:0b:a4:3a:b4:fb:
                    ae:97:6f:69:5d:fc:55:ae:fd:d7:94:e9:b3:19:b9:
                    30:15:e0:2b:ef:4d:9c:ff:41:6d:ee:ac:5b:9a:45:
                    09:85:9c:2f:05:9d:86:4e:b0:c7:28:ec:9a:bd:bb:
                    64:03:9d:f9:7f:c4:1b:40:4e:2e:b1:5e:e9:24:ac:
                    d3:05:2e:3d:50:eb:54:80:21:83:fc:2c:00:7a:74:
                    e7:24:c4:1c:19:0b:7e:ac:1e:a0:9a:06:8d:0b:60:
                    ec:d3:8b:3f:7a:38:0a:dd:1d:52:20:1e:f1:92:6b:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:B3:0D:EC:6E:5F:BB:8B:01:CE:E8:72:1C:DB:EF:54:F5:EA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/839eb910-1a14-3f61-997c-f800091ddd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:5e:a5:81:49:21:ef:78:92:87:a2:48:91:de:3e:f6:89:
         09:74:fe:6d:0f:d0:18:0f:c0:0d:a2:4f:08:79:25:c6:79:eb:
         05:fc:01:70:26:f7:91:ad:87:08:95:d1:ee:2a:4b:0d:8b:2c:
         13:1f:e0:5e:de:e0:80:c8:ef:ab:dc:14:11:bc:3b:fc:0a:73:
         b7:0c:6c:6d:b0:43:9f:e7:d8:1a:f7:71:4e:83:37:54:f1:e3:
         d2:84:6b:ad:c3:40:38:08:f4:8d:2b:21:dd:41:1d:51:9f:0c:
         53:f4:b5:e4:21:0e:e4:dc:f0:26:99:a9:2c:a6:01:97:9f:e2:
         f1:2f:30:4d:78:4a:2a:95:cf:03:94:1d:3c:63:d1:62:20:28:
         c1:95:9a:29:02:a8:bd:4f:79:5b:4d:a1:1d:5a:b0:67:41:1e:
         58:ca:25:84:de:52:b7:11:0c:b6:d7:82:4e:eb:a6:b2:17:2a:
         b5:10:2e:22:ec:4a:f7:b9:6f:fb:49:29:1a:77:bb:56:67:39:
         ac:55:cd:e8:f5:4c:bf:c0:89:ee:33:dc:fa:1a:fe:71:62:dc:
         d1:80:e8:6b:9f:b5:5f:7c:55:23:15:ca:eb:08:fb:68:ab:a1:
         cf:a3:dc:37:4a:5a:d8:3d:ce:8b:cc:96:e1:50:d6:0c:d5:e5:
         76:2d:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:28:13 2025 by rpki-client