Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cebf3608-bd4b-3a49-bb4f-6a5c9d087e59.roa
File:                     cebf3608-bd4b-3a49-bb4f-6a5c9d087e59.roa (raw, json)
Hash identifier:          lqRZeS16JvEd3HbVoWYFDNE9GjATos603r5/ZTyi5CY=
Subject key identifier:   51:6F:5A:36:24:DA:E1:22:81:B4:E0:53:0A:21:86:7A:93:38:34:4E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A039F421C362524B69DE280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cebf3608-bd4b-3a49-bb4f-6a5c9d087e59.roa
Signing time:             Mon 23 Jun 2025 17:57:53 +0000
ROA not before:           Mon 23 Jun 2025 17:57:53 +0000
ROA not after:            Sun 21 Sep 2025 17:57:53 +0000
asID:                     15290
IP address blocks:        207.245.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:03:9f:42:1c:36:25:24:b6:9d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 17:57:53 2025 GMT
            Not After : Sep 21 17:57:53 2025 GMT
        Subject: CN=88dd59ac-8a34-4815-a194-e29c7d4afb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:51:7b:08:4f:ae:01:4d:0e:9a:3d:10:b2:
                    72:ce:6e:a8:3a:e5:99:8f:4a:ad:ef:9b:f6:8a:14:
                    fb:81:17:60:76:67:47:50:e9:8d:c8:3e:24:8e:d9:
                    48:a4:42:6a:f9:a1:a4:a8:f5:8e:82:73:ed:f7:fb:
                    84:29:0f:8d:11:0b:72:c3:a6:08:69:8e:2d:d9:81:
                    33:3d:27:48:7d:38:37:27:54:97:8a:fc:3d:0a:2c:
                    69:45:5b:27:8d:2b:00:b7:68:38:89:ee:e0:9c:ea:
                    08:57:eb:8a:00:b4:c7:77:54:3b:05:04:b5:f0:8f:
                    f3:b6:ea:d0:96:94:5b:22:57:36:ea:40:58:06:6b:
                    84:43:99:1d:e7:0c:b8:67:c1:96:3c:3e:a9:1f:12:
                    a7:da:86:ed:7c:c3:ae:ab:41:88:53:c3:7e:c5:25:
                    95:b5:a0:0d:0b:39:5b:9d:cc:13:89:07:96:ff:21:
                    7f:2b:5d:d0:76:7b:97:83:a9:79:7d:6b:b4:c0:5b:
                    e4:30:a7:d4:de:d7:e7:07:2c:5d:cc:70:3e:32:d8:
                    d4:b4:78:dc:8d:e8:11:03:91:92:38:31:63:a6:0e:
                    b5:e0:52:e6:dc:f5:7d:8d:af:95:4b:60:9e:bd:78:
                    f6:f7:df:5f:f0:dc:62:41:a7:18:5f:17:64:14:7b:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6F:5A:36:24:DA:E1:22:81:B4:E0:53:0A:21:86:7A:93:38:34:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cebf3608-bd4b-3a49-bb4f-6a5c9d087e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:35:f0:16:b4:2c:95:c3:80:0c:77:a9:06:90:49:b6:f8:
         44:40:a5:9f:64:15:f0:92:b1:92:b3:5e:4b:5c:1c:d7:94:49:
         7a:2f:a7:bb:67:39:51:3f:a6:08:ad:1e:01:d2:38:6d:9e:e4:
         74:c6:b5:44:7c:9c:73:47:e1:a3:df:e1:b5:23:b7:d5:09:b4:
         78:eb:6b:8a:a1:2c:e5:b1:b4:15:aa:96:10:53:de:7a:47:87:
         e2:a1:46:28:74:49:09:6c:13:6c:29:ae:d6:83:df:ed:dc:49:
         f1:c5:fc:ec:44:47:43:a8:80:16:8a:a1:69:7e:c5:8f:f4:e7:
         7f:a4:99:3d:48:a5:2d:cd:41:53:91:4c:f4:ae:4b:6d:f6:d8:
         b6:63:51:bc:98:49:69:f8:77:bb:fc:00:4b:b7:50:a1:76:de:
         d7:41:4b:c1:17:bb:18:a4:e8:ad:0b:c9:ed:61:22:85:ef:6c:
         c5:c3:03:84:6f:42:33:aa:ca:25:03:ec:cb:8a:be:87:44:f5:
         38:61:16:1a:ec:cb:72:af:0a:1b:57:92:e2:14:02:77:ac:05:
         3a:cb:2a:7b:c6:57:a9:51:7f:9c:96:5c:07:c9:7b:c4:44:88:
         19:d8:60:ee:cc:33:f9:23:94:7b:bc:84:ba:e0:c4:00:90:3d:
         41:95:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:39:25 2025 by rpki-client