Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad4cde1d-1b44-3efa-ac0e-fde6f068586d.roa
File:                     ad4cde1d-1b44-3efa-ac0e-fde6f068586d.roa (raw, json)
Hash identifier:          j0xauxcPmVCHiqCSI+EpBfFX522o3YZnSFJzRrZTkr8=
Subject key identifier:   D6:9F:82:63:03:3A:80:CE:9F:8F:8C:90:BE:71:E5:25:48:17:C5:1C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E654F75761712871F8321700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad4cde1d-1b44-3efa-ac0e-fde6f068586d.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     23482
IP address blocks:        209.249.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f7:57:61:71:28:71:f8:32:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=82280f0c-3572-4f73-a0ae-d8ab3d4273c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:ab:62:35:20:e8:63:55:d6:99:b7:ae:25:
                    b4:db:1c:e1:1c:6f:68:13:e7:98:85:2f:1a:1d:77:
                    d0:04:c7:f6:65:d3:51:a7:49:51:b7:83:db:36:19:
                    ef:9f:99:12:a0:89:52:25:cb:f9:61:2b:a6:3d:b4:
                    77:bc:c1:a1:38:09:b1:16:81:a9:39:71:37:7f:a6:
                    a2:67:6a:eb:3f:a1:3e:52:a9:1f:b2:39:25:4c:6b:
                    d9:6f:32:55:44:c5:bf:33:fc:25:60:6f:16:aa:64:
                    87:79:f1:08:aa:61:48:f7:6a:c4:4e:21:26:02:6e:
                    e0:22:88:9a:de:49:9f:ad:4b:48:c4:18:8e:1a:c5:
                    47:4c:2c:9a:b9:c1:f1:0f:1c:a8:a1:55:7f:45:4a:
                    95:72:73:c9:bf:a5:63:9e:73:f3:c6:24:be:da:fd:
                    3a:ed:ac:d7:60:1a:4a:60:17:b0:05:17:ee:31:a2:
                    c4:28:cb:0e:f4:9d:e1:90:48:1f:49:4c:79:f5:a7:
                    fa:3d:63:e9:26:5d:eb:1a:ab:1e:4b:3c:51:28:d8:
                    f0:05:2b:64:9e:34:32:59:cc:94:49:b5:9d:15:ee:
                    1a:13:08:fa:cb:65:fc:90:92:87:6b:97:8f:e5:f0:
                    80:ad:7d:b5:97:0b:12:e2:df:7c:a4:cb:c3:2a:be:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9F:82:63:03:3A:80:CE:9F:8F:8C:90:BE:71:E5:25:48:17:C5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad4cde1d-1b44-3efa-ac0e-fde6f068586d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:cf:96:d8:11:50:32:e6:22:8b:1e:4c:5f:97:7a:76:ad:a2:
         32:fd:5e:9a:a2:fa:7e:8d:27:bf:f9:f4:f1:a8:60:6a:ef:09:
         74:24:91:dd:8c:38:41:c4:84:26:33:40:77:6b:71:0d:44:66:
         96:4f:bc:51:3a:ef:d6:75:01:de:52:f4:62:f4:f4:45:46:e8:
         2e:7f:39:58:38:9c:c1:41:0d:8a:a1:cf:db:99:d2:13:7c:cf:
         60:f9:9f:21:f0:07:ba:b2:54:a9:71:dd:8d:97:b7:ab:38:54:
         73:6a:46:26:e4:89:3f:ba:1d:ac:26:3c:7c:aa:32:87:72:88:
         28:94:f8:e0:04:67:19:fb:b1:db:dd:e4:cd:bb:a6:2e:4c:a6:
         c2:47:2c:e3:bc:fa:46:a8:32:5e:7f:1c:8d:5e:04:7f:c5:94:
         65:42:1b:93:fd:07:d8:bd:eb:3b:55:f3:32:12:51:56:65:82:
         a5:ab:09:fd:6e:7a:0b:ee:ce:55:5f:e0:e5:5e:ca:e6:84:1e:
         9b:b8:71:e0:89:04:b2:6c:68:09:9b:31:af:f9:93:5b:17:a2:
         05:6e:a3:71:ac:0d:d8:6b:c8:ab:47:3b:d5:b4:d4:15:49:51:
         c3:ed:38:e6:95:6a:de:e0:32:5d:5a:b6:6e:49:1d:4c:7e:7c:
         74:28:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:11:11 2025 by rpki-client