Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5401463a-180e-3fce-af4f-6f6795c81e7b.roa
File:                     5401463a-180e-3fce-af4f-6f6795c81e7b.roa (raw, json)
Hash identifier:          2PI8WKn//maYJZRjqViI2QxEL1aeZDwtVPfHoZYMB5M=
Subject key identifier:   DC:03:42:01:3F:8D:FF:F1:BB:F3:2D:90:A4:A9:31:76:6D:74:2F:BC
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A91252296F62E377D5900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5401463a-180e-3fce-af4f-6f6795c81e7b.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     32703
IP address blocks:        208.103.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:91:25:22:96:f6:2e:37:7d:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=faf7b2e3-193c-4974-9de9-1436db09da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:16:62:44:8b:5d:32:d7:79:8b:9a:3a:9c:
                    93:d8:5b:10:1b:ef:07:c1:99:d6:5b:44:4b:50:14:
                    b0:1f:68:80:14:97:4c:03:12:28:10:55:ba:12:5b:
                    42:70:f7:d4:c1:24:5c:14:6d:fc:6e:88:29:41:c2:
                    20:1d:7b:79:72:0b:38:c1:78:c9:55:73:35:71:35:
                    a5:fe:93:8a:4b:01:dd:5d:85:17:e7:c2:ec:c9:09:
                    a9:2a:c8:82:d1:06:e7:24:b3:68:79:62:dc:d5:e2:
                    fb:3f:fa:40:e5:55:11:75:48:d8:b7:59:49:23:3a:
                    44:3f:82:b9:14:f8:e7:e2:27:3a:ca:ff:d3:cb:54:
                    23:c7:88:63:bd:fc:a6:fa:9f:92:5b:3a:08:98:95:
                    e3:da:9f:8d:1d:70:01:f7:9e:4d:cb:d7:bb:38:1e:
                    84:87:5b:ad:8a:5b:1d:ac:6e:a1:f4:cc:bb:18:cc:
                    9b:dd:9e:28:2d:46:6c:e3:20:5f:49:2a:cc:ad:c6:
                    53:58:4c:9b:bb:62:b1:b5:17:10:c4:dc:0f:b9:b5:
                    28:58:13:2a:87:0f:f7:84:fd:fa:6a:3d:db:12:0a:
                    70:1f:3d:c2:e1:d5:46:c2:1c:5c:d7:09:d7:c9:b3:
                    67:08:a7:19:b9:37:1a:e5:4f:36:84:10:f8:59:fc:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:03:42:01:3F:8D:FF:F1:BB:F3:2D:90:A4:A9:31:76:6D:74:2F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5401463a-180e-3fce-af4f-6f6795c81e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:ab:7b:72:a9:d6:18:00:03:8b:11:2e:b1:d7:64:50:69:30:
         18:66:24:1d:3a:de:03:c0:d3:7d:e2:1c:f5:ee:51:09:08:08:
         70:90:05:eb:65:22:9d:5f:3b:ee:5b:11:48:d5:82:b5:4b:0f:
         14:b3:eb:12:dd:74:ed:b4:fb:55:c0:37:b8:4c:82:ad:50:fb:
         90:d3:07:83:46:f6:6f:35:56:0e:13:22:84:4b:ef:78:1c:5a:
         a0:0b:e7:89:4c:a3:0c:f8:e8:01:2f:fd:81:0e:65:9e:23:6e:
         d1:60:b7:1f:ec:64:4f:37:50:aa:73:14:82:4d:f1:04:e0:a3:
         22:bc:94:5d:3e:84:3b:fe:f7:58:ef:05:51:2d:77:bb:15:db:
         63:12:d8:0c:4b:90:c2:03:12:ba:06:a3:fe:42:77:43:9e:c3:
         9a:cd:e0:ff:f8:77:2e:96:b5:0f:82:03:64:9e:89:e7:2f:a9:
         d0:8a:ef:0b:94:d4:c3:f8:65:08:1a:22:f0:49:65:8d:9a:af:
         f8:4a:ca:16:a8:69:6c:ea:3f:94:d8:2e:95:df:41:5d:db:a6:
         96:38:46:1b:d1:75:ac:d0:9d:fd:24:0b:e8:e1:64:69:de:75:
         fd:ad:98:1c:fa:22:ea:f0:c6:2f:9e:50:2a:74:62:13:7b:4b:
         de:64:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:45:38 2025 by rpki-client