Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/5f1086ad-8948-354a-9582-4af6c1a59399.roa
File:                     5f1086ad-8948-354a-9582-4af6c1a59399.roa (raw, json)
Hash identifier:          6b0F6C055dJCNWO47eW6HaU8dakM83IN7DEAdtHqdEs=
Subject key identifier:   2F:37:BE:CF:70:8D:3E:9E:15:22:12:FD:B9:CB:7C:DC:29:AD:40:C7
Certificate issuer:       /CN=194ace12-e4ed-4136-8094-1719b84ab2e5
Certificate serial:       010D0C9F4328584AD0D66D62D44992BADFA65F80
Authority key identifier: BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/5f1086ad-8948-354a-9582-4af6c1a59399.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        207.245.144.0/24 maxlen: 24
                          207.245.145.0/24 maxlen: 24
                          207.245.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:6d:62:d4:49:92:ba:df:a6:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ace12-e4ed-4136-8094-1719b84ab2e5
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=af4d42a2-a7ba-4c76-a09f-43e6a5c6f9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:6d:2b:0d:b0:dd:7e:e9:90:06:3e:88:b6:
                    6b:a2:25:dd:8c:ab:40:a9:c6:f8:6a:1c:09:c7:18:
                    81:d3:e3:41:5a:55:85:75:6b:f2:29:72:d1:15:d7:
                    ba:3e:ef:11:f2:22:b0:b2:b6:11:d8:59:f9:fc:e5:
                    07:fc:0a:53:b2:45:ca:3f:55:ca:11:5f:52:aa:b7:
                    0f:32:83:33:21:79:55:1c:52:a1:8d:99:6d:ad:d3:
                    49:df:54:a5:cb:37:a8:d2:69:9b:4a:0d:51:64:f8:
                    9b:54:a5:81:42:54:49:d4:ff:dd:27:1c:b0:9e:57:
                    f3:d2:b7:48:af:fe:71:3d:f2:25:4c:95:d1:45:88:
                    b1:00:fd:82:e6:1a:86:ec:5f:e7:d8:de:5a:2b:73:
                    a0:c4:b1:9d:41:d5:47:01:57:d7:a8:fd:aa:58:50:
                    09:bd:3b:d3:3c:bf:a0:84:5d:a0:c8:c7:58:2d:75:
                    73:dd:dc:74:fd:3a:03:e8:02:65:93:86:f8:0a:2c:
                    b0:72:83:67:83:d8:56:e5:01:2d:ab:d1:6a:45:e9:
                    de:94:48:e7:e7:7d:8e:b7:c7:33:29:96:38:fb:ea:
                    7d:96:3e:8e:d0:ce:98:16:51:4c:d9:a4:4e:29:77:
                    9c:8e:3f:32:5c:9b:74:90:63:a2:89:91:5c:4f:e5:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:BE:CF:70:8D:3E:9E:15:22:12:FD:B9:CB:7C:DC:29:AD:40:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/5f1086ad-8948-354a-9582-4af6c1a59399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.144.0-207.245.146.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:ba:33:ff:72:1d:c3:ab:54:e8:9e:91:7b:c8:53:36:dd:
         61:06:8a:9a:9a:09:fe:eb:49:a5:85:5a:e7:7e:79:74:0d:af:
         9d:04:89:23:21:8a:f9:5c:61:b1:81:46:6b:aa:82:f8:b4:24:
         00:87:a6:a3:fa:87:f6:67:f4:58:26:b8:ff:2b:ae:57:17:85:
         6b:da:5c:17:dd:0b:6d:ce:7d:e5:68:6e:df:a9:e0:af:27:6a:
         1e:f1:bc:78:67:02:a5:14:bf:6a:9d:e9:b8:5b:4f:84:3c:44:
         8b:f2:00:eb:36:14:29:47:05:1e:51:16:47:5b:a5:eb:61:e7:
         1f:13:e1:56:13:20:f9:2c:93:a8:b4:6c:98:44:9c:15:7b:b6:
         02:4b:90:89:80:64:59:90:89:5e:4c:47:d5:6f:5c:2a:51:a2:
         4d:30:2b:90:4c:e6:1e:d4:07:57:d5:38:6e:63:f8:91:fa:43:
         72:c5:14:04:c2:12:d6:09:12:76:e4:b1:99:7c:bd:74:b9:c5:
         a0:c4:b8:9e:e7:ec:45:ed:9d:15:ee:b4:68:c4:b0:b8:30:d3:
         a5:78:90:1a:e3:fb:ba:b7:d5:f3:ae:ad:75:e0:b4:bf:c3:e1:
         2d:b8:fe:f7:54:fc:a7:8e:93:6b:b2:0e:e6:82:6b:98:bf:29:
         5b:c2:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:08:20 2025 by rpki-client