Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
File:                     7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json)
Hash identifier:          84/g27IZiD7kRc5z0xA/jaQwGd+Vn4P9hKvoxpnfQfE=
Subject key identifier:   98:F8:EB:55:3D:BE:29:41:6E:BA:34:EE:DA:1B:FA:C7:B6:C5:8D:41
Certificate issuer:       /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Certificate serial:       010D0C9F4328584B0B76A5F8D78C9D4AF4C34B80
Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        198.177.154.0/24 maxlen: 24
                          204.52.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a5:f8:d7:8c:9d:4a:f4:c3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=1ebb7419-4c0d-43fd-a22e-71250671f8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:df:11:2b:65:ed:dd:1c:d3:b7:6c:bc:b8:
                    0a:fa:ee:a1:fb:b4:aa:07:f7:73:45:9d:3d:10:e8:
                    a2:c3:0b:a4:42:33:3a:bc:d2:38:c4:c4:2c:31:50:
                    a7:16:9e:b0:51:b5:40:e8:31:de:87:8c:4f:3f:8a:
                    d9:c8:ed:8b:f2:dd:c5:fd:6c:83:a2:fa:1e:c4:42:
                    02:06:a4:b4:a1:f2:93:33:f6:2a:94:ba:2c:37:13:
                    39:d2:22:f1:0a:5c:c5:66:e8:4d:72:cd:f6:69:2e:
                    60:00:e6:7b:52:f9:a1:a0:b4:d3:d3:f2:cd:83:cb:
                    55:1f:57:ec:61:37:80:40:50:d4:f1:5a:13:38:fb:
                    5b:84:e0:e6:8e:c1:ca:42:e1:66:80:4a:47:56:dc:
                    50:2a:0c:15:75:38:ee:bd:08:a3:6a:7c:6e:e2:e8:
                    fc:91:0a:f1:a0:34:89:0f:d7:54:6f:90:83:b5:c0:
                    74:48:31:e4:97:36:76:65:5b:d6:34:98:47:62:0a:
                    8d:60:7f:ec:e8:c1:e6:dd:d5:a4:62:dc:df:e9:91:
                    94:1a:da:f8:df:56:7d:7c:71:4f:60:6d:f1:9e:63:
                    30:f3:77:47:fc:83:5b:95:5a:cd:b4:46:d7:20:75:
                    e9:d9:e8:43:6b:41:11:c7:6b:43:da:f7:ff:d9:31:
                    98:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:EB:55:3D:BE:29:41:6E:BA:34:EE:DA:1B:FA:C7:B6:C5:8D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl

            X509v3 Authority Key Identifier:
                keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.154.0/24
                  204.52.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:32:32:67:4d:2a:42:4e:a9:04:b3:5c:d7:2b:cd:26:8e:fb:
         b9:a6:c1:c4:03:b2:fd:3b:22:dc:dc:95:55:9e:cd:52:23:25:
         a7:bf:fa:0e:55:b8:3c:76:f6:d6:33:75:9d:12:b0:21:36:ab:
         a4:a5:b1:c2:e5:b8:98:0f:b4:ce:f6:ec:b6:9e:6e:fb:18:86:
         30:fc:b9:c1:29:a3:99:ec:82:5a:43:5a:4b:e5:ea:f1:24:63:
         c5:9e:b5:5f:db:23:b1:98:9a:da:33:e9:43:3e:f1:42:3e:6a:
         3d:7e:7d:af:0f:97:81:c5:af:e4:fc:4e:4f:50:e9:a4:7f:47:
         91:05:58:1d:29:7f:b8:6b:77:de:99:21:3d:b3:b9:48:e9:6a:
         9e:b6:89:cb:91:5f:95:ca:29:18:e6:f6:9f:10:9e:77:45:ab:
         a0:94:bc:6f:2d:9a:6b:09:e1:28:32:4f:48:e6:12:4f:1b:fa:
         ab:05:79:da:f1:4d:18:d4:40:46:4f:a2:29:19:31:28:c4:c3:
         96:1f:25:37:26:fd:4c:37:a5:b2:f8:59:53:07:9a:11:94:dd:
         0a:6d:c5:06:da:63:01:ec:c0:34:3c:8e:31:c1:97:86:80:b9:
         db:d4:11:3e:0f:08:aa:32:45:a7:40:2a:ed:a1:6f:99:0c:ae:
         1d:e8:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:19 2025 by rpki-client