Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/54ca646b-b264-311f-809c-b6fa3c7aefc2.roa
File:                     54ca646b-b264-311f-809c-b6fa3c7aefc2.roa (raw, json)
Hash identifier:          YAIVGcrdMTFSSovZcFymt3IqveXkLdwCNF5gd27KuGM=
Subject key identifier:   01:56:C9:BB:19:5C:7D:86:12:6E:2E:C8:C4:59:D9:E2:B5:22:D3:51
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AD9365A36470C11F50C2B2080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/54ca646b-b264-311f-809c-b6fa3c7aefc2.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     4997
IP address blocks:        208.39.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5a:36:47:0c:11:f5:0c:2b:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=38547ae8-d200-45e4-aef7-60692019e835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:5b:6b:50:60:0d:81:a8:a6:dd:7c:6f:68:
                    e6:f7:ee:6b:78:5a:10:8a:6b:1c:8a:37:55:6b:7a:
                    28:6a:33:54:4e:90:c7:77:64:c4:ff:eb:94:5b:bd:
                    b9:24:a6:66:a8:65:58:1c:a3:d9:51:fe:29:20:04:
                    d8:b9:3d:58:b6:40:d7:a7:6c:75:ca:ab:8d:86:79:
                    17:9a:07:22:e1:de:7c:d8:cc:75:7e:a4:46:67:1b:
                    d4:93:b1:f9:d0:c3:f4:6b:8d:49:c6:93:1c:f7:30:
                    13:02:36:4d:e0:fc:aa:ba:1a:dd:1b:2f:10:92:5b:
                    65:83:b9:a1:c0:da:61:8c:67:72:b9:b1:a8:ca:53:
                    64:5b:b4:6e:91:42:56:54:fa:cd:87:67:71:ca:9b:
                    f6:46:91:27:a5:d5:64:57:73:2c:ba:92:ea:89:a0:
                    40:f9:69:59:6d:c6:af:a2:ba:c0:55:23:5b:92:41:
                    ff:cc:c9:d0:10:8d:cb:f9:46:48:b6:7f:10:4c:59:
                    ce:04:c9:c1:6d:da:a3:e9:41:c7:7f:27:b4:59:f6:
                    cc:e8:a0:0e:4e:45:aa:61:48:00:b6:dd:db:98:40:
                    76:0b:77:35:b4:b9:43:98:ee:b9:e1:11:e9:61:bf:
                    1b:db:2d:76:6e:5e:2e:bc:d5:52:61:71:ae:8e:5e:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:56:C9:BB:19:5C:7D:86:12:6E:2E:C8:C4:59:D9:E2:B5:22:D3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/54ca646b-b264-311f-809c-b6fa3c7aefc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:de:23:dd:7b:a7:14:d0:3d:e9:3b:0a:b7:03:09:64:dd:
         7b:a5:31:c5:a7:7b:5b:70:d1:83:72:fc:66:a0:6f:59:24:e7:
         8c:3d:78:67:71:86:50:9d:0e:95:e6:4b:15:26:a3:15:8f:97:
         81:d1:7b:0f:d9:fa:6f:0a:e0:c9:5e:5a:21:ae:68:3e:52:e9:
         55:3f:f2:9d:d3:9f:e9:9e:ae:6f:c8:a7:ea:93:9c:3f:6e:83:
         25:0f:66:f1:87:d0:d7:e9:17:27:99:85:33:a3:73:41:7d:91:
         ad:43:bb:f6:77:e5:a5:a0:a3:36:23:ec:c4:7c:97:df:56:8a:
         fe:d3:67:09:8f:5a:96:62:42:a2:67:35:b7:2a:30:30:e7:c3:
         92:00:89:79:ad:cb:c7:68:0e:52:70:17:a1:68:b0:11:44:aa:
         4e:6d:d7:af:43:f5:af:7a:82:d6:9e:15:6a:3a:b3:5e:aa:cc:
         8f:97:7b:b6:39:aa:2a:b7:8b:37:c3:d7:23:68:31:a1:b5:91:
         6d:32:fb:de:57:30:43:52:00:3f:d4:4f:80:86:8c:91:4d:26:
         c1:3a:ca:a4:73:11:3e:b3:4b:78:44:c7:d6:44:df:96:e1:b1:
         9b:4a:cc:e6:33:7b:3e:3e:2e:2f:ea:f1:7d:f6:97:99:d0:dd:
         c1:db:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:53 2025 by rpki-client