Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4530c0e5-3983-3099-b3a0-2f99d1650361.roa
File:                     4530c0e5-3983-3099-b3a0-2f99d1650361.roa (raw, json)
Hash identifier:          lvu4tpeP8jSdWuloFysSW3lStD8/RcKwKMWzCoOyV4A=
Subject key identifier:   28:49:2A:50:E5:DE:4E:8A:5D:BA:A7:33:14:93:58:AF:AB:A0:C9:F1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E654F7EAD40D1909FFE7BC00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4530c0e5-3983-3099-b3a0-2f99d1650361.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     53888
IP address blocks:        209.249.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f7:ea:d4:0d:19:09:ff:e7:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=08feae00-6447-4329-b85c-2d85a82f12cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:92:08:ed:ce:b0:6f:54:93:b6:d1:99:92:
                    ff:a5:21:2f:18:72:6e:d1:e9:98:46:26:32:f0:33:
                    f9:c4:3f:31:35:d8:77:af:4f:69:63:36:de:c3:cd:
                    7e:c2:53:57:a1:41:d3:a9:44:fd:1e:0d:78:b1:96:
                    08:fd:ec:cd:ff:54:89:42:b0:39:37:1c:89:6a:bd:
                    b8:b5:92:54:c4:4e:d6:85:35:82:91:78:d1:07:33:
                    b9:50:bf:f8:bc:5c:db:b9:01:82:5a:74:5e:64:9f:
                    a6:20:c8:c1:f9:0b:85:80:b3:40:8b:4d:2c:ab:3f:
                    e6:60:9c:62:c5:c5:87:a7:05:4c:a4:56:51:46:80:
                    bf:6a:36:33:e8:f7:87:2d:d0:b1:3d:25:fa:74:15:
                    01:ed:88:db:6a:d3:b9:50:1e:49:5c:1c:8d:26:cc:
                    07:4a:c3:35:09:94:39:ae:f8:c6:8e:c0:2b:0e:a5:
                    6c:78:fb:3a:75:46:6b:8c:43:8e:d7:22:fe:a5:8c:
                    b6:c6:9e:07:c0:2c:b9:e6:f2:10:0d:e3:7d:dd:f5:
                    38:e1:be:99:1f:94:73:fa:33:5f:92:f0:d6:8b:f9:
                    a6:67:84:62:e6:d5:c8:ed:74:26:9a:d8:11:1f:22:
                    8c:fa:c5:a7:15:f1:10:f4:db:04:ca:b1:a8:34:53:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:2A:50:E5:DE:4E:8A:5D:BA:A7:33:14:93:58:AF:AB:A0:C9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4530c0e5-3983-3099-b3a0-2f99d1650361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:9c:84:a1:87:f3:59:b7:f8:36:0e:27:69:0d:fb:6c:4e:
         2e:89:b1:23:7b:9a:58:4a:59:aa:5f:57:5a:a1:53:9d:0a:11:
         e4:a7:e5:94:7e:74:48:3b:d1:84:e8:9a:4b:a5:02:54:e6:29:
         4e:37:d2:de:35:84:9b:61:be:85:ec:88:73:88:b3:47:a6:dc:
         92:a0:61:90:f2:29:bb:b1:95:a6:2a:79:71:02:9f:b0:49:c3:
         4b:ba:2e:e4:a6:3f:d9:98:09:f4:1f:ac:95:54:df:66:a7:b1:
         cc:5f:ed:44:06:1f:74:0f:0e:10:b3:90:6c:eb:de:3b:e5:5c:
         45:08:13:ac:a2:23:ac:3a:74:f7:1f:8b:94:d5:16:96:d8:b2:
         59:37:57:af:7a:c9:da:da:48:44:f7:6d:89:02:2c:5a:ce:69:
         41:04:eb:f6:5f:7d:8e:27:6a:38:bc:e4:f0:3f:a1:f3:57:ff:
         cb:68:e1:2e:37:d5:08:11:9a:fb:4c:78:96:26:45:c3:3e:64:
         7a:87:1b:3e:dc:e3:9b:83:fd:5f:51:59:0b:ff:7a:7b:12:0d:
         7c:59:5f:f6:34:78:92:5d:6f:a7:1a:44:dd:f8:02:91:01:06:
         59:8f:8a:c7:50:5f:6d:ad:2e:99:f9:f0:34:4f:7e:97:85:79:
         03:8a:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:44:43 2025 by rpki-client