Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa
File:                     4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa (raw, json)
Hash identifier:          HkJr96tpGSc9DIU8jS0JjVzEQAv860n3CupTV5v7kzs=
Subject key identifier:   85:2F:6C:E1:CD:4D:7E:9F:05:57:24:4D:58:C1:39:43:F1:4D:58:B2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A8936F994980345432600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     4997
IP address blocks:        208.39.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:89:36:f9:94:98:03:45:43:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=26a9d62e-76d4-4244-a8cf-220a071f106e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:62:b9:d9:7b:cf:7f:a2:f0:a3:c0:22:09:
                    1f:ea:b0:55:9e:5f:1c:21:17:80:36:ec:8a:e1:22:
                    88:02:1c:68:9e:a7:78:a8:34:4a:e6:32:cf:52:39:
                    9f:a0:4e:fa:b0:84:3f:a1:68:f2:84:82:4e:29:36:
                    e0:63:21:fb:71:75:70:28:be:3d:6a:6a:50:07:0f:
                    bf:bc:1b:f9:ff:0c:8d:40:c8:17:a3:92:f7:20:f6:
                    8c:d4:b9:a5:dc:f7:ec:61:e4:c8:16:3a:59:52:f3:
                    f4:bf:ca:35:0f:45:78:43:7b:2c:3c:f8:17:2b:a3:
                    52:25:b6:65:90:d0:90:03:30:f7:fd:f7:66:64:f5:
                    8d:15:70:05:a0:e4:ea:a3:e5:37:13:00:f9:16:34:
                    bc:18:26:c1:0f:b0:86:77:b5:d9:ac:20:d0:68:fd:
                    b4:ef:0c:72:83:8f:a7:03:95:89:62:27:4e:b1:db:
                    e6:8c:54:f5:1d:ab:b5:92:22:2c:3e:8e:1e:73:ef:
                    68:59:58:b9:55:fa:4c:49:90:03:09:57:36:0b:dc:
                    e3:9f:0a:6e:4b:7d:8a:07:0b:3b:72:d1:a0:c0:a1:
                    81:0b:e8:c2:2d:88:46:46:1b:90:02:60:9a:63:62:
                    a6:dc:77:2e:99:ba:74:4e:c5:fa:28:ac:26:84:95:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:6C:E1:CD:4D:7E:9F:05:57:24:4D:58:C1:39:43:F1:4D:58:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:4d:4b:29:9d:8f:c3:6c:f4:1b:84:f0:02:fa:80:f7:76:f9:
         54:69:08:dd:20:99:68:77:af:3f:c7:51:ed:2d:c7:d3:d7:75:
         53:22:a4:29:af:a0:09:1e:45:da:7c:28:95:80:ab:df:b3:df:
         e5:96:a9:c3:62:b3:2c:42:43:bf:27:ee:a0:d4:c8:45:3b:99:
         10:0b:10:ab:64:3b:31:73:a0:76:f4:49:2e:45:4f:d2:53:d0:
         d3:b2:c5:eb:b8:68:9f:c3:73:cf:e1:53:8f:7b:c8:39:a2:7f:
         ef:64:77:72:0a:50:21:05:93:11:36:60:08:ec:0a:95:d2:d5:
         7d:40:00:25:db:41:4d:06:d9:5c:da:14:80:11:6d:30:db:1e:
         60:d5:2b:93:72:d5:2c:34:41:2d:21:1a:ff:64:97:61:ac:27:
         90:f8:1f:f7:58:c2:37:f3:5d:a1:ff:2d:5b:c9:2f:ed:51:d0:
         7b:4d:de:47:ec:07:ed:c9:49:eb:b3:ec:10:67:e7:ed:40:11:
         4a:c4:9b:91:c0:94:3c:eb:78:58:11:2c:2f:7b:47:9b:bf:99:
         66:00:b9:c8:8b:39:9d:0d:e8:fd:a2:99:db:18:90:61:a3:41:
         e6:e1:3a:32:80:b3:eb:6c:54:a9:31:91:3f:12:1f:9b:d4:06:
         6e:b6:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:32:30 2025 by rpki-client