Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
File:                     3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa (raw, json)
Hash identifier:          orNg2XbbV910G5seLOPaSJvQCNE1d3JdBITTzyjbkjo=
Subject key identifier:   9B:1C:D3:AA:27:4F:FF:F7:52:59:19:97:67:42:8D:0F:1F:E8:2C:38
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85F96FF0ACB36C21A900A00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     4997
IP address blocks:        208.39.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:96:ff:0a:cb:36:c2:1a:90:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=542b8b33-a5ee-444a-8efe-a44df1680309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:66:d0:c3:97:80:92:15:5b:c6:d8:bc:eb:
                    bd:fb:e7:e3:f1:7f:ba:59:20:97:f4:ea:1d:db:25:
                    f5:f6:23:f6:24:d4:66:5f:d7:08:8c:c6:c2:d7:af:
                    93:23:ce:90:cd:ce:76:0a:70:63:bd:3d:ef:b2:41:
                    07:8c:ce:e9:9e:ff:fe:43:df:99:41:e4:c0:26:35:
                    bb:0f:91:e3:0c:ae:cd:1f:a3:38:82:ba:89:5e:4e:
                    59:c2:0e:3d:e8:82:7b:c8:65:71:0b:5c:0f:63:05:
                    7c:6e:31:18:ab:aa:1c:54:67:c7:a5:08:79:00:7e:
                    a3:d1:b5:aa:6c:6c:9c:fd:f8:1a:a9:55:2b:75:2f:
                    33:22:3c:2b:5c:de:42:8d:ee:9f:1a:44:d2:be:a3:
                    f5:4c:ec:c7:7f:79:31:77:43:a8:99:9a:19:a1:2e:
                    d7:02:3d:6a:a7:cd:52:e2:ca:fa:d0:51:86:06:a8:
                    ad:2e:63:9c:b9:0b:34:82:42:2f:06:b7:14:e0:ba:
                    75:b9:ea:13:a1:d9:20:8f:9f:7f:28:1e:57:90:04:
                    cd:df:b5:e9:21:b2:3e:a8:33:13:c0:ba:ba:8e:93:
                    15:c5:65:8d:d3:93:e7:0e:1f:1b:f3:ac:5f:41:4e:
                    61:eb:ff:c6:c0:da:74:ff:30:95:9e:8a:17:a8:13:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:D3:AA:27:4F:FF:F7:52:59:19:97:67:42:8D:0F:1F:E8:2C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:34:2f:72:6b:12:5b:c6:40:7c:fe:b8:a4:45:dc:e9:8a:3e:
         48:a8:42:08:b3:3b:d3:1d:7c:f3:6f:f9:0f:6c:93:48:f0:e5:
         0d:51:67:0e:7f:dc:60:c8:d9:4c:20:62:11:b9:39:c4:eb:63:
         05:80:f0:92:f6:dd:ae:90:e9:23:c9:62:7b:a4:04:7a:16:91:
         58:04:54:3e:89:91:52:f9:41:ee:86:09:72:90:68:70:07:ef:
         88:6e:eb:17:7d:43:fa:9c:11:27:95:f5:b7:3e:f6:9e:bc:b6:
         4e:df:f6:88:34:fb:e3:3e:d6:16:81:57:56:b9:5f:ae:21:a8:
         78:28:71:1d:53:38:3f:13:78:d5:b5:91:2d:88:a1:50:0c:31:
         de:35:3d:6a:f2:ee:b8:a4:b3:91:4e:6a:e1:a2:7d:38:75:5c:
         f8:71:17:c7:7a:e7:53:61:64:c6:7c:9f:40:b9:c8:27:58:68:
         a2:1a:8f:73:90:a2:49:df:08:fa:38:bc:d4:c9:51:ab:d1:1c:
         9c:c4:40:81:ad:d4:25:85:86:c5:d6:79:73:a6:84:fd:ab:36:
         1b:25:a7:ba:5d:1e:5a:e2:79:ec:dc:7a:f6:19:82:dc:fa:ad:
         cd:fd:28:6d:88:e0:a9:89:b6:30:46:9c:70:00:2d:3b:96:df:
         69:75:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:18:56 2025 by rpki-client