Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
File:                     6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa (raw, json)
Hash identifier:          WPofBipezKnRWWqVXYujIQPtFqRsTQZ54O7uDzoLOQ0=
Subject key identifier:   A8:8C:D2:FB:69:C3:5C:A9:F8:ED:E8:D7:EF:6F:1E:6A:82:16:28:BD
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584AE4611E3B587AC35550FA0700
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     2572
IP address blocks:        150.199.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1e:3b:58:7a:c3:55:50:fa:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=a26291e5-e33a-43eb-a3b4-df905e0178e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:e1:69:9f:26:9b:af:30:1c:5e:2f:d1:01:
                    08:03:c5:be:cc:5e:45:37:df:77:39:33:e9:99:9a:
                    35:54:f7:b2:5a:dd:b2:6c:e4:42:ea:22:c2:c9:48:
                    29:f3:25:76:3f:6c:a0:94:91:98:a4:bc:e4:b4:e2:
                    01:b6:7b:a8:cc:a2:36:a7:8d:c1:83:ad:c7:db:66:
                    41:9b:18:de:0c:49:06:cc:2e:73:6e:57:2d:ab:4b:
                    1a:43:61:ea:0d:f5:79:72:02:00:e0:ad:42:0c:35:
                    1d:b0:b2:c6:ed:bb:89:96:13:f7:51:a8:28:79:bf:
                    8a:43:14:9a:ba:90:66:e9:03:6c:b1:db:5c:89:a9:
                    f7:d7:cb:6b:2d:2d:45:a7:d5:8a:4d:ca:8e:be:13:
                    c9:05:7d:42:d7:63:00:f1:60:4f:fb:45:af:55:00:
                    3a:9a:97:30:ff:f1:a4:87:ed:d1:b8:a4:26:c9:f7:
                    2c:07:de:8c:f1:44:f9:63:f0:9c:05:7a:76:63:d1:
                    78:f1:6c:f5:8c:e3:28:ad:af:2a:9d:17:64:e0:c6:
                    d4:ad:b1:f4:99:b0:34:af:8c:b6:cd:50:5b:bf:69:
                    60:af:49:bc:16:98:db:5c:93:6b:2f:5d:b3:54:a0:
                    13:a0:d5:8e:ea:17:49:02:1c:ae:ab:12:29:0e:98:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8C:D2:FB:69:C3:5C:A9:F8:ED:E8:D7:EF:6F:1E:6A:82:16:28:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e6:90:63:63:bd:73:cc:46:ac:28:ff:85:73:52:3c:b3:5a:
         9b:89:03:12:2d:92:1e:57:6e:30:18:2e:43:06:e1:74:8b:ab:
         71:37:be:91:fb:42:ca:70:f2:7c:29:c3:e8:c4:52:be:dd:27:
         6f:ac:00:78:58:79:3a:7c:fa:57:06:68:8f:10:d6:6b:33:17:
         3b:2b:d2:ad:3a:36:5c:71:69:2e:3e:1c:22:fe:c9:7f:11:32:
         65:ed:19:f9:62:d5:c3:33:a2:91:42:5c:6e:0c:40:74:80:f9:
         72:1e:3e:68:e0:c7:64:a4:03:91:8c:0c:86:70:81:fb:88:4f:
         b0:d2:0e:d1:9c:05:af:21:3b:a6:9d:eb:f0:98:58:93:f4:6a:
         3d:c7:ef:91:b5:91:75:4c:0a:9a:73:6c:59:69:4d:a3:b0:ce:
         c2:8a:2b:f9:fe:d6:3e:84:58:79:db:67:15:fd:e6:a3:70:d5:
         91:8b:40:51:d2:56:64:8f:89:9b:37:af:05:ac:4d:05:7c:22:
         22:21:88:34:c2:40:7b:cb:93:a0:d5:ba:8a:56:41:aa:94:7d:
         46:2b:21:c6:e7:e5:63:a8:92:95:5d:c2:85:99:aa:0f:9c:1a:
         e6:03:05:4e:48:a7:fa:48:20:e5:2f:18:f7:e2:c7:73:54:14:
         41:b0:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:41:23 2025 by rpki-client