Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/c06df79a-a931-345c-b2e6-e4cb32309979.roa
File:                     c06df79a-a931-345c-b2e6-e4cb32309979.roa (raw, json)
Hash identifier:          gTZK4RHxnk19KypM6TWQFEhwrZgchsP+woAENfYexQs=
Subject key identifier:   F3:83:6E:38:F9:50:BA:2A:76:BB:A2:8A:BB:D3:47:ED:E0:0F:55:F3
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584AEE359169380E44C796297580
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/c06df79a-a931-345c-b2e6-e4cb32309979.roa
Signing time:             Thu 21 Aug 2025 13:31:05 +0000
ROA not before:           Thu 21 Aug 2025 13:31:05 +0000
ROA not after:            Wed 19 Nov 2025 14:31:05 +0000
asID:                     25645
IP address blocks:        204.16.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:35:91:69:38:0e:44:c7:96:29:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Aug 21 13:31:05 2025 GMT
            Not After : Nov 19 14:31:05 2025 GMT
        Subject: CN=b4047be3-eed5-4960-acc9-0aba2e22b909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:29:53:b4:14:5a:07:cf:48:19:b9:7a:62:
                    ba:81:e0:f1:08:c9:1f:e4:4a:9e:25:30:ca:d2:6d:
                    bd:9b:0a:ea:59:69:35:37:cd:be:e7:04:64:68:97:
                    8e:52:ea:7d:43:14:e4:a3:b1:e0:54:c3:73:da:52:
                    3a:cb:1e:a6:d9:54:fd:eb:2d:d2:36:d9:53:56:55:
                    8e:e9:23:9f:d0:d3:8b:a4:d4:ef:42:b8:bf:61:d6:
                    df:70:70:a4:88:cb:9a:61:1b:c5:1a:d5:76:1b:88:
                    a7:77:40:bd:c3:d1:b9:d4:4c:52:c0:12:12:31:b5:
                    1b:8d:ee:50:3f:01:ed:9f:c8:78:47:eb:e3:05:2d:
                    a2:b4:d4:d3:f6:7d:68:dc:9e:18:a1:f4:95:08:66:
                    3f:c2:17:ff:5c:a0:b6:9f:00:55:ac:4a:9a:8d:6b:
                    3a:64:e1:ac:fa:28:e5:94:52:0e:a5:1c:79:ae:02:
                    b4:65:6b:80:b0:47:0e:69:5e:1d:44:e8:4f:44:67:
                    37:58:e1:0c:19:d6:9a:1b:53:04:8d:dc:64:53:14:
                    a5:31:1f:8f:44:29:43:d3:31:b2:d5:4d:67:6d:ab:
                    f9:6b:3b:6d:9e:47:cb:7b:69:74:59:c5:48:c9:62:
                    1d:0d:f3:ae:5e:6a:81:22:08:22:9b:78:c6:ba:32:
                    c8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:83:6E:38:F9:50:BA:2A:76:BB:A2:8A:BB:D3:47:ED:E0:0F:55:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/c06df79a-a931-345c-b2e6-e4cb32309979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0b:e1:29:c5:65:c6:3b:d9:3e:69:ab:4f:c8:e6:9c:cb:30:
         17:e7:24:18:41:88:e2:1f:0c:c4:13:1c:5f:7b:52:1e:79:52:
         a1:d5:4b:c6:11:2b:25:41:25:9e:39:aa:df:01:cb:7f:f6:a2:
         ff:58:1d:20:85:28:80:79:9a:ba:c2:27:72:a6:11:ce:77:ec:
         0d:90:1f:a4:12:00:34:04:44:cb:c7:cd:ef:91:42:43:d0:69:
         80:a9:31:ed:67:c2:42:0a:a5:be:ca:44:04:3d:4b:02:cc:e1:
         df:60:7a:42:76:db:19:61:fd:f6:54:32:b1:a5:6d:86:10:a0:
         a4:47:6d:e9:8e:ce:8a:76:b2:3e:96:82:3f:d2:fe:9b:d7:75:
         70:d1:e5:ba:a9:e0:de:93:24:4b:4f:f3:08:66:a5:47:61:1f:
         f7:11:16:56:d0:a6:99:f4:11:8e:c8:ea:a5:ef:94:6a:d3:cf:
         99:ec:0a:42:01:46:e6:cb:e0:b7:ea:b0:bf:ee:24:b0:a4:8a:
         1a:36:49:73:d6:f2:f9:51:40:01:46:f6:c6:cc:d1:b7:1d:30:
         c7:19:55:84:de:01:4e:67:35:88:de:72:b3:97:27:94:85:98:
         51:ab:3c:41:79:d2:34:f5:4f:ab:89:5f:99:80:40:d2:df:af:
         69:ef:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:30:05 2025 by rpki-client