Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/97377f8a-0665-37a9-8ffa-a31cdce7265d.roa
File:                     97377f8a-0665-37a9-8ffa-a31cdce7265d.roa (raw, json)
Hash identifier:          F3wZ9n1AZl7zKimCq9i/pnKr63zW01oxzcYDGQwPyDI=
Subject key identifier:   7D:47:A1:81:D4:E8:AC:6D:54:EA:43:AC:7E:CE:F6:07:95:86:B1:C9
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F4328584AC87650759D7515EFC58FA880
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/97377f8a-0665-37a9-8ffa-a31cdce7265d.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     53991
IP address blocks:        216.245.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:50:75:9d:75:15:ef:c5:8f:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=aab03966-9a17-456d-8970-bff44362e789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6f:70:65:58:6d:ca:1f:d0:50:53:54:d5:ad:
                    f3:bd:e5:b1:16:a3:9c:b3:ae:fe:97:62:2b:52:c4:
                    22:f6:f8:2c:1b:b3:b8:7e:15:b2:03:ca:ac:74:89:
                    c6:1d:03:c7:3b:aa:2b:8c:27:15:88:e1:1b:8b:a0:
                    be:20:c4:42:92:03:2d:7d:4b:dc:43:43:4d:16:7b:
                    5d:4e:59:18:87:67:08:ac:74:85:b3:59:01:27:fe:
                    ca:f7:fc:60:d3:bb:f2:97:37:42:d2:6c:91:1b:81:
                    2f:fd:41:5a:25:1f:e9:26:5e:1a:e8:a1:88:3b:17:
                    7d:6d:ca:bc:1d:99:32:f5:2b:1c:fd:b4:2e:c4:30:
                    96:8d:30:26:55:1c:c4:85:b4:48:69:a8:1f:0d:be:
                    f9:46:9c:ad:aa:83:0b:00:d5:58:6e:68:0a:4c:28:
                    26:d9:10:55:c8:c9:1e:a9:80:33:db:63:cd:2a:15:
                    aa:b1:4c:8e:7f:0e:14:65:74:cf:fe:30:6f:ea:e3:
                    79:9d:fa:43:41:fa:88:4b:ee:f2:66:d0:29:0c:a7:
                    7d:7f:29:28:e8:65:44:39:6d:e9:98:f6:7f:b2:46:
                    1b:8c:e6:bb:45:83:84:c3:41:42:62:ab:35:b6:69:
                    cc:68:94:7f:8d:eb:db:b2:5f:08:46:13:f5:cd:4b:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:47:A1:81:D4:E8:AC:6D:54:EA:43:AC:7E:CE:F6:07:95:86:B1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/97377f8a-0665-37a9-8ffa-a31cdce7265d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:f8:d8:66:ba:b5:2c:10:2b:09:f4:3e:25:00:05:ec:7a:
         0d:a5:17:cc:43:48:12:f0:cd:17:68:ba:5a:ef:0b:2b:89:3a:
         65:70:5e:2c:36:cf:80:5f:5e:2d:90:f3:2e:8a:3d:87:d6:3a:
         e1:51:87:36:8f:36:55:4f:71:73:fc:a6:3d:df:5c:f9:f0:84:
         fa:2b:cc:4f:c9:c8:03:78:35:8b:cf:1f:98:36:7c:2f:ca:16:
         10:7a:a0:42:ee:25:e7:00:e3:f2:88:16:3c:d9:05:60:28:f2:
         09:5f:fb:21:7a:a3:9e:e5:a7:17:46:3f:7e:b3:0d:45:56:11:
         10:52:71:65:0d:19:65:13:1d:6f:08:d3:67:e4:ee:bc:64:af:
         32:29:e9:7c:9b:4c:44:d5:37:3f:02:6f:bf:73:b6:d2:3e:91:
         a6:e0:77:09:e8:26:15:a9:8f:f4:b2:72:27:c1:56:6c:6e:32:
         50:38:c6:46:2b:5d:c8:eb:79:9a:1f:ba:50:4a:f9:da:3c:2f:
         32:df:3c:0a:ee:74:b9:a3:26:6e:0a:f9:54:ec:6b:8c:0b:fb:
         b9:04:b5:f6:a0:2e:6f:10:a5:15:56:d1:79:66:b6:99:f7:c7:
         fe:16:53:6d:96:49:a9:69:95:df:67:29:a3:4e:ae:ef:fb:4c:
         40:18:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:26 2025 by rpki-client