Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa
File:                     eae0a58d-2ab5-3697-8268-38a3265b2c11.roa (raw, json)
Hash identifier:          u7rE4s1aIxbLfPY1xafYX3bYKxMEskbiE8uZZ3C68kk=
Subject key identifier:   94:1C:E6:AF:FD:68:A2:E4:0B:43:93:93:DB:09:6D:8C:B4:00:FA:D2
Certificate issuer:       /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial:       010D0C9F4328584AFEE6ACC77B41BCD98B420200
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     12022
IP address blocks:        208.83.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ac:c7:7b:41:bc:d9:8b:42:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=7b046121-0bbb-4648-96bb-54e185453658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:38:c5:c3:0c:ec:ae:94:d0:03:f9:53:c6:
                    40:33:f8:d5:a5:cd:ef:d2:de:46:6e:25:0b:fd:64:
                    a9:b5:33:68:c7:bd:ff:3c:4f:a0:5d:8f:d7:02:e2:
                    33:0c:21:a6:38:80:4d:e2:8c:96:e4:cd:4d:14:1f:
                    f4:4d:05:0e:12:38:b1:77:0a:b8:75:54:1b:42:e7:
                    66:19:20:a1:57:b6:30:96:5c:5b:58:39:93:43:a3:
                    21:ce:a7:1a:7f:2b:01:fe:4e:1c:af:4e:fc:ca:6d:
                    f1:d8:ee:6d:0d:f7:c0:63:47:21:ed:cd:05:f5:61:
                    db:62:9f:9e:88:63:73:8c:3d:1b:45:e8:f4:1b:e5:
                    50:30:49:45:05:0b:d2:4f:86:cd:4d:91:d5:6b:c9:
                    3f:d3:30:52:33:f0:7c:fa:36:1a:71:0a:bc:0a:d4:
                    d2:9a:00:45:b1:e2:ba:43:21:59:49:88:18:12:34:
                    c6:f2:c2:b8:71:0d:dc:b0:70:73:f6:69:4b:0e:6a:
                    c5:89:b6:a3:c3:8a:a9:c9:fb:30:05:e7:8c:73:85:
                    9d:fe:47:63:5c:1a:a2:81:4b:01:7c:21:13:54:5a:
                    75:b6:55:55:93:b5:da:41:26:bb:49:5b:79:fe:0f:
                    0f:27:a3:e5:a0:92:81:0f:cf:29:5d:34:8c:73:01:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:E6:AF:FD:68:A2:E4:0B:43:93:93:DB:09:6D:8C:B4:00:FA:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl

            X509v3 Authority Key Identifier:
                keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dc:45:be:c8:cc:7d:5e:db:3b:cb:9f:51:4d:bc:5b:99:b3:
         7a:05:5f:0f:78:e9:47:e1:69:15:0d:57:0c:76:a7:c2:60:2f:
         0f:db:5f:37:57:5b:eb:4b:4d:17:47:a1:c5:0b:85:b9:15:2e:
         7b:10:3f:a7:8b:bd:40:13:8b:64:bc:c5:b1:1c:99:2d:ff:7a:
         f5:1e:a5:ee:a7:b2:63:4b:7a:e6:ee:bc:6c:b4:1a:c3:b1:a9:
         4d:8e:f1:60:2e:68:18:0f:dd:88:36:72:af:c5:24:f1:ed:6e:
         51:9d:2a:f6:50:0e:f9:61:b3:f2:fa:7f:64:47:6a:77:a2:cc:
         0d:d7:d7:2e:7d:16:ed:d2:e7:d9:bf:1d:bb:97:44:85:81:01:
         86:02:75:30:99:20:22:45:6a:15:6a:aa:f3:4f:18:d8:c6:64:
         32:10:00:ed:a6:9c:67:fe:07:a1:d0:8b:13:f8:5a:96:e2:2e:
         c8:7c:a0:d8:30:54:c0:83:07:38:19:6d:ff:b4:3f:8b:17:e1:
         99:13:81:25:3f:ce:c0:c2:61:72:95:3b:d5:83:c0:31:b2:f5:
         a3:d9:3e:34:35:a1:cb:07:33:85:e5:bd:bf:6a:ff:f5:30:9b:
         c4:74:52:89:e3:34:67:06:68:a8:7e:da:e2:12:09:04:ed:53:
         06:e2:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:52 2025 by rpki-client