Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa
File:                     05ab8139-89d9-35ad-bd35-66f27355974f.roa (raw, json)
Hash identifier:          5T2W3kBrtPpMXz0RKusiudn6kBL8MldnMvkq069OQDQ=
Subject key identifier:   C5:DF:48:93:18:4E:E3:75:C2:3D:C6:7C:94:AA:59:E0:05:EA:E7:52
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584AF0F139848F73BC390CEB4E00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        155.226.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:39:84:8f:73:bc:39:0c:eb:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=73a7d7d8-25e2-4fc9-a06c-16b12cffa21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:59:b7:14:c5:7c:26:46:f8:be:a3:73:4f:
                    9b:b1:14:24:3a:7b:a1:13:f1:2a:f3:a0:e0:ea:16:
                    8a:43:e7:4a:5d:55:36:06:15:38:dc:84:c6:87:93:
                    f9:8d:1e:07:83:05:6d:51:ab:8f:ad:d7:ed:04:3e:
                    66:7a:a1:a0:27:bb:49:12:18:36:f1:29:aa:e1:4d:
                    8f:b0:b2:4c:ff:68:a4:c6:1e:5f:b1:69:b9:c4:d3:
                    fd:42:13:88:9d:2d:b2:f0:e8:cb:ea:f4:d8:ff:20:
                    d7:88:95:0c:b0:e6:60:10:ec:8c:e2:69:93:75:90:
                    af:91:94:bc:5a:77:52:f3:1f:92:c1:a4:b1:af:ad:
                    ca:05:ad:30:ef:a2:1b:f3:30:f7:33:66:24:43:c7:
                    d8:83:a8:58:a4:16:09:79:c1:85:3a:4e:8f:a2:e6:
                    08:15:96:4d:86:55:02:df:c2:fc:c1:bd:ac:13:00:
                    35:c4:9c:72:81:88:97:32:48:35:55:8a:a8:66:c0:
                    2e:0d:4d:1e:a1:b8:8d:a6:1a:ad:7b:6b:a7:88:1d:
                    69:45:ed:62:12:93:11:64:1a:0f:76:d6:da:b5:b7:
                    37:0d:94:74:d3:ee:08:8d:41:dd:fc:75:c8:18:0f:
                    6e:24:16:86:af:90:a5:4d:e4:e2:c7:37:8b:7a:0f:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DF:48:93:18:4E:E3:75:C2:3D:C6:7C:94:AA:59:E0:05:EA:E7:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:1e:7c:33:b9:e1:cf:2b:03:38:37:0d:6d:62:c7:d7:a7:
         68:c9:55:a4:4c:7e:04:6b:28:7c:80:23:43:22:d9:a3:fe:b7:
         c5:fa:83:33:a2:1a:36:36:9c:2e:64:03:5a:83:0c:99:1c:d1:
         e9:ea:fe:e2:4b:2f:f0:f2:f3:3c:6a:f3:92:4a:ae:91:09:a5:
         9f:7a:2e:d6:ec:2d:18:90:da:bf:a6:0a:bc:41:0b:a6:5b:a1:
         9d:41:3d:ed:46:cc:08:07:75:70:57:22:8a:db:bb:36:c5:69:
         6c:e1:89:ed:44:66:19:a9:53:82:a4:49:d0:3b:c6:40:b7:c6:
         cd:d5:c4:6a:ec:3a:f7:2d:01:13:93:42:f0:1e:7b:24:f8:17:
         bb:51:41:15:0c:aa:57:84:24:76:14:d3:e2:1a:b9:9b:fc:b3:
         67:49:92:72:eb:a2:cb:6d:14:ed:58:71:21:37:80:c5:6b:93:
         5c:50:20:bc:39:02:65:f8:ef:fd:d9:0b:96:88:13:43:5d:a4:
         2d:a0:a0:15:94:13:20:95:e6:eb:40:86:e9:eb:e4:18:99:11:
         d6:b3:c7:f3:54:62:de:2b:5e:ac:d1:b0:28:54:75:90:16:05:
         2f:f4:be:68:e3:4f:33:3a:b7:eb:0b:77:52:e4:3f:34:36:c4:
         29:bd:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:57:09 2025 by rpki-client