Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1e23cc2f-e526-3404-8408-484eb1213f23.roa
File:                     1e23cc2f-e526-3404-8408-484eb1213f23.roa (raw, json)
Hash identifier:          bld9Cfstzvm3lYpD3jxn0KXMcVLv1o1zsxdUNvxdfIo=
Subject key identifier:   AF:CD:00:BF:FA:1D:23:7B:69:4A:B5:AE:42:6D:8E:4E:6C:DF:B6:C5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A218D416848FD8BF4F4BD60
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1e23cc2f-e526-3404-8408-484eb1213f23.roa
Signing time:             Mon 23 Jun 2025 18:58:11 +0000
ROA not before:           Mon 23 Jun 2025 18:58:11 +0000
ROA not after:            Sun 21 Sep 2025 18:58:11 +0000
asID:                     15290
IP address blocks:        209.146.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:21:8d:41:68:48:fd:8b:f4:f4:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 18:58:11 2025 GMT
            Not After : Sep 21 18:58:11 2025 GMT
        Subject: CN=e648ea19-716c-4f20-a0d1-4d66d6ff3e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:c1:5d:b3:65:8f:21:7b:d7:60:96:11:78:
                    0f:e8:38:12:a1:d2:66:bd:6a:cc:61:b5:8c:01:e8:
                    e3:43:ad:58:4c:c3:c5:8f:2f:e8:64:fe:d8:43:13:
                    8f:63:2e:40:30:a0:84:24:61:4b:d0:63:ee:60:ba:
                    b2:27:41:a1:1e:f2:70:33:3d:a3:9f:30:d8:13:3a:
                    00:a0:e9:0c:6f:56:4d:4a:f6:34:d6:17:3e:e7:42:
                    d4:58:70:5e:80:a2:89:ad:be:48:c5:90:dc:63:09:
                    95:06:f0:a4:8b:54:75:b3:26:86:7e:1c:e6:ab:ed:
                    b0:fb:0b:0c:d1:96:3b:6a:3c:a1:3b:e3:95:07:53:
                    a5:ee:45:9d:67:05:cf:f0:8c:4b:40:36:03:06:a2:
                    66:e0:18:33:2f:70:8c:20:11:2a:bc:ff:6b:64:b9:
                    aa:63:27:f1:33:2f:18:c9:19:61:6f:6e:af:d0:ee:
                    c3:e4:20:a4:73:e0:d5:5c:9c:99:b9:f5:f1:c0:79:
                    56:39:28:14:1d:25:25:ac:29:c8:24:a7:b3:de:a6:
                    08:b4:2e:84:3b:a1:53:ec:8e:04:0c:8e:b4:29:13:
                    df:1f:3f:1e:f1:5b:2b:c9:eb:9b:53:7e:53:c0:56:
                    be:a7:46:2a:3b:5d:7e:b0:4c:95:5a:f4:81:4f:46:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:00:BF:FA:1D:23:7B:69:4A:B5:AE:42:6D:8E:4E:6C:DF:B6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1e23cc2f-e526-3404-8408-484eb1213f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:db:a7:b9:0d:cc:83:53:e9:a1:d9:cb:0a:0f:87:20:d5:
         d6:bc:36:60:95:e8:ec:b1:2a:8b:62:a9:bb:c2:6b:7d:8a:5a:
         20:ba:7e:2f:2b:e4:d5:01:14:ad:48:34:f5:5e:44:ea:45:91:
         a6:5b:e5:45:a5:7a:9f:16:3a:77:86:21:5c:45:03:2e:d4:3a:
         da:07:5f:08:ae:6f:29:a7:ec:c8:eb:7a:78:6a:d8:2b:52:fe:
         46:32:9b:91:bc:a8:07:25:74:6b:82:8c:ab:10:27:a0:44:6a:
         fd:44:15:df:11:87:fe:61:fb:07:c0:18:d5:38:86:4d:c0:ae:
         b7:0f:aa:8d:d6:9c:50:df:9f:7f:85:68:d0:33:eb:22:59:d6:
         a4:3d:99:b7:42:d2:e3:e2:6e:9b:95:4d:7b:c2:06:60:35:b9:
         62:02:88:43:5c:ab:37:e4:78:20:5c:cb:ac:31:3f:f2:d2:c1:
         a8:34:61:3f:c7:41:41:de:3d:3c:2b:c5:95:64:94:6d:d7:72:
         81:c0:c9:70:9a:e8:14:fb:27:07:92:0a:7a:e4:b7:cf:ab:d3:
         d0:78:8e:92:7c:b9:89:f1:49:44:e8:76:32:7c:2e:38:3b:02:
         69:46:5a:9a:59:b1:03:6d:7b:67:71:3d:1d:05:6f:b4:ad:42:
         fe:79:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:46:22 2025 by rpki-client