Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
File:                     c7a9fdea-664c-38e1-be4a-09e48baa862e.roa (raw, json)
Hash identifier:          VGoonrM2SzMG2OF2a9x2uf2H8TFt+FlWa+XmDw1y52k=
Subject key identifier:   AD:7E:51:C2:70:28:1D:8D:0A:24:C0:6B:2A:19:95:1B:97:91:D1:4D
Certificate issuer:       /CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
Certificate serial:       010D0C9F4328584A4C3B1DDF66DFB348E6AA3AC0
Authority key identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     9009
IP address blocks:        167.253.136.0/24 maxlen: 24
                          167.253.137.0/24 maxlen: 24
                          167.253.138.0/24 maxlen: 24
                          167.253.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1d:df:66:df:b3:48:e6:aa:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=82e6e01b-90e4-4ebb-9842-a5f9ebffbcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:9c:6b:3b:68:7a:be:73:04:e4:9e:c5:e5:
                    55:71:00:0f:6b:9f:a1:26:56:0e:a0:53:18:bc:06:
                    11:cf:15:e8:dd:1e:11:5d:05:4f:ce:66:b3:08:40:
                    f5:b7:0e:66:bd:c6:45:e5:1d:60:3f:43:c2:07:e2:
                    20:72:63:9b:56:de:e1:ec:c7:c2:78:e9:fe:f8:aa:
                    1c:79:4d:03:de:00:f9:27:c2:4f:d6:0e:74:f9:d5:
                    1b:90:63:19:1a:c7:f6:85:f8:82:10:54:89:45:5b:
                    23:95:c2:ec:a7:58:b4:0a:82:fa:29:fe:d9:34:38:
                    6d:0a:21:b5:ab:79:a6:cc:89:3c:43:b2:f8:43:50:
                    9e:3d:52:fc:ad:8c:3c:80:a1:9e:42:84:62:29:00:
                    91:09:c8:ce:35:d9:dc:3e:4f:23:8f:92:a4:3b:69:
                    03:d8:8d:60:e3:04:b4:2b:3c:37:fb:c1:59:33:68:
                    52:8d:23:f7:e9:16:a2:96:da:e1:aa:d4:3d:c5:34:
                    8f:30:c8:3d:83:18:a6:b2:37:a7:dd:20:a3:da:09:
                    7c:ab:1d:5d:74:cd:8c:20:6a:b1:ce:25:a0:a1:1f:
                    c2:5f:81:3f:bb:6e:5e:cf:36:56:3a:ad:4a:55:12:
                    d3:e6:d1:99:4a:18:27:13:fb:9d:0d:69:99:63:eb:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7E:51:C2:70:28:1D:8D:0A:24:C0:6B:2A:19:95:1B:97:91:D1:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl

            X509v3 Authority Key Identifier:
                keyid:4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:df:32:e6:2b:88:c2:be:a2:24:b4:61:be:8d:bd:40:1f:
         84:44:6d:a8:08:ac:2e:9b:49:9d:74:fd:f3:85:3b:2e:06:ed:
         87:ed:61:96:91:b9:77:cc:3d:a9:30:97:3f:81:f0:1b:51:83:
         11:5e:ed:d2:db:d7:73:f5:93:e9:3b:e2:5c:af:fb:3c:70:69:
         8a:28:6d:b6:62:ba:d7:3e:d9:fc:28:aa:34:98:e3:bc:b0:e1:
         24:4e:bf:71:c9:74:a2:8b:cf:a3:ef:38:15:96:0e:75:14:e2:
         5d:c6:f6:c9:6e:75:92:b9:23:f2:dc:14:f8:6e:a7:14:3a:20:
         8a:c3:de:ab:48:8a:78:14:39:cb:e9:10:8f:21:db:1f:fa:14:
         d6:10:cc:0b:da:a6:4d:25:ec:f7:7c:e2:04:07:c3:c3:81:46:
         1d:57:86:07:46:24:f0:ff:40:72:ff:8c:bf:ff:0b:42:0e:83:
         9a:c0:77:2f:57:64:a0:ab:7d:b7:5e:f3:03:82:83:c4:0e:f2:
         e0:67:23:0a:e5:0c:81:20:64:bc:55:7c:87:75:16:c2:03:ec:
         c5:9c:77:a2:0d:10:ff:1b:b3:3c:19:6d:ef:8f:d1:ed:a5:a9:
         1d:a3:c3:6a:34:83:d3:2f:55:6e:7a:a6:65:90:37:2d:af:46:
         6a:9b:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:24 2025 by rpki-client