Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
File:                     9db44533-de07-3bd6-a689-efec080bd048.roa (raw, json)
Hash identifier:          LUGb3xMwDeEdUZx+ICxa1MYVF8CALDvpD18rcH4/2Xk=
Subject key identifier:   41:0B:B0:E6:C1:97:58:04:DC:D7:A7:AF:D4:94:12:3B:A4:15:A2:C8
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584AF5214795C53D69D80BCA920C
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        208.103.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:47:95:c5:3d:69:d8:0b:ca:92:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=dd04665d-f388-465f-a9a9-7d4c6cbcbe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:fa:12:ad:71:e7:c0:9c:c0:00:02:d3:4d:
                    97:ff:d0:14:4f:93:59:d3:36:3c:a6:29:61:79:de:
                    82:cc:1c:5d:3f:94:61:31:43:a8:0a:f7:2d:61:66:
                    0d:d7:37:92:5a:de:d2:81:65:47:8e:03:47:f4:37:
                    c9:e6:b5:e7:d0:ee:63:31:6e:00:d9:c6:35:df:45:
                    80:f6:5e:d6:1d:11:de:ab:6f:cf:e3:f1:48:06:c5:
                    47:cf:2e:3d:9d:2c:0f:ee:2e:82:61:90:28:27:68:
                    7c:3a:97:3c:11:85:18:1b:30:58:a3:63:af:7b:be:
                    ed:a7:6b:12:eb:5d:34:bc:95:65:22:7e:09:1d:15:
                    52:96:7b:64:d4:0d:65:16:dd:a5:7d:d5:0b:e1:99:
                    c6:79:b6:f1:5a:f8:08:76:7b:74:9f:ec:6b:63:26:
                    4c:19:b0:f8:38:6d:e3:8a:bb:5c:0a:d9:c6:b1:62:
                    40:48:0d:2c:10:a2:ba:f2:f9:ce:6d:e5:a3:5b:a3:
                    22:ba:b1:f1:c5:ca:99:9b:21:2b:21:01:db:63:a8:
                    70:2e:44:d0:a8:4b:5d:e8:cf:e3:01:73:7a:f9:8a:
                    8d:7c:3c:40:44:9f:66:67:89:98:30:c4:a9:b3:9e:
                    0f:f2:88:aa:6b:9b:03:23:5d:0f:6d:22:bb:9b:18:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:B0:E6:C1:97:58:04:DC:D7:A7:AF:D4:94:12:3B:A4:15:A2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:de:e2:d0:8a:dd:f6:1b:33:59:40:35:3f:91:46:88:be:
         a3:12:62:a7:03:f5:68:23:df:de:f7:10:7d:85:11:5f:b8:44:
         5f:f6:f1:bf:1e:2d:2f:9c:c2:84:65:34:1b:6a:3a:3b:81:4a:
         f3:93:c9:ec:a3:f4:9a:02:0e:47:f3:91:98:dc:f4:c0:16:e2:
         97:3f:f6:27:6f:c6:8f:e8:ae:6b:5c:17:b1:2b:cd:61:d8:4f:
         d6:98:e8:4f:5b:74:93:68:f7:50:79:cd:03:7d:26:00:cf:1c:
         93:5d:2a:45:1f:50:3e:3b:32:4b:02:1d:bc:c7:85:bf:7a:e5:
         5b:34:a2:5b:d9:37:ac:83:35:56:32:9a:a6:72:58:59:03:c7:
         55:c9:cf:62:00:0f:22:5a:f4:fc:f2:81:25:4e:ff:06:51:57:
         ae:46:63:aa:ce:c0:4c:91:3c:84:e8:b3:73:bd:35:d3:8d:1d:
         ba:23:8f:4b:c7:42:1e:76:26:f2:c0:85:ce:6c:dc:d4:9e:ee:
         a5:f3:8c:ae:52:19:7f:65:5d:d6:c4:23:ab:5b:ac:97:aa:9b:
         fc:de:4f:48:e4:62:7b:79:88:51:d3:11:ef:e8:01:08:46:f4:
         e6:c6:ed:9d:68:50:50:1f:19:0a:37:2c:71:11:4b:fa:9b:9c:
         ec:36:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:30 2025 by rpki-client