Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
File:                     1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa (raw, json)
Hash identifier:          qdvruKoVvSBZ2+wPesK8mjpYw2phBOveyqi3QLYHJ0Y=
Subject key identifier:   10:3E:57:F3:03:25:94:19:CD:2A:5A:D9:BD:F7:07:4A:72:85:5C:0A
Certificate issuer:       /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial:       010D0C9F4328584AE46124E6678AF99BB99810C0
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        165.109.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:24:e6:67:8a:f9:9b:b9:98:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=08c09524-f674-49c6-90fd-f38393e15f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:a4:fa:9f:05:f1:f0:b0:1e:d2:04:19:e7:
                    d6:4f:58:8c:b9:fb:13:8a:b6:92:64:7e:78:7f:8f:
                    60:33:57:35:a7:26:d1:ff:cb:42:7d:a2:d0:9d:4d:
                    8f:c8:83:03:27:98:de:da:3f:c7:56:5b:c0:43:82:
                    7e:25:99:e9:d2:bc:ab:5a:9e:a2:b7:77:b0:d4:61:
                    d5:9c:af:65:db:bd:0c:19:7e:d2:8e:ba:ca:45:fa:
                    10:d2:fe:83:a4:ca:d3:f2:ef:ce:39:e2:79:a4:80:
                    11:c5:9d:4d:d7:a8:ed:85:e2:01:04:d6:da:09:75:
                    cb:48:e1:99:6f:95:14:dd:38:5d:0c:89:2f:de:de:
                    b1:91:a1:76:37:7f:76:bd:71:1d:c6:e9:44:ec:aa:
                    05:15:a8:e0:ae:a1:55:ff:17:42:19:e7:9b:bb:49:
                    17:55:a6:29:f2:36:5d:ba:22:32:57:38:aa:fc:cc:
                    b1:99:21:62:55:9c:3b:6f:3a:00:1d:71:7e:59:63:
                    b2:c8:9a:d6:86:04:45:f3:d2:83:a3:4a:4f:d8:bf:
                    08:14:22:2c:3a:cb:ec:db:f1:c8:42:b5:47:8c:96:
                    79:ba:66:e4:49:12:a2:a7:b0:a1:de:6c:51:1e:5b:
                    f3:64:69:29:b8:c9:83:cb:49:2a:d5:17:32:40:21:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3E:57:F3:03:25:94:19:CD:2A:5A:D9:BD:F7:07:4A:72:85:5C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.109.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:a5:eb:cc:8c:19:b5:9b:92:fd:f0:11:73:98:96:fa:65:
         f9:8a:5c:85:e1:46:89:01:61:67:b1:e3:bb:82:e9:26:5b:6d:
         8d:b7:69:15:4b:53:74:cf:40:88:23:b0:84:1c:4c:c7:98:66:
         6a:e8:9d:1d:e5:72:52:4a:cf:2a:fc:df:fa:b6:a9:ac:c7:a0:
         2c:1c:89:7e:59:55:93:e3:d7:b0:93:fa:83:9f:84:8a:a6:45:
         af:c8:b9:52:8d:aa:32:03:e5:4a:42:fe:5e:a5:fd:9d:4a:d0:
         94:40:e7:0a:3e:27:cf:70:d4:ff:aa:3f:14:fa:87:11:a8:d6:
         b2:41:da:fa:36:e6:fd:a9:62:1b:d5:f1:65:26:73:81:5e:96:
         9e:73:94:97:3b:50:de:34:13:3e:27:4d:e9:6f:e3:35:97:cc:
         c6:43:d8:97:7d:41:fa:31:aa:c1:7d:de:6f:b6:b0:e9:6e:62:
         92:aa:15:06:96:92:5c:fd:c9:10:6d:bc:c5:63:c2:f6:88:26:
         86:39:1a:b4:c5:79:0d:d9:c3:21:85:42:26:50:b0:3f:21:35:
         e1:47:70:36:57:af:44:83:f9:ad:bb:81:9d:96:b6:44:4c:8f:
         34:09:ec:74:b2:7e:75:9c:4a:73:f8:7e:00:14:80:68:e1:a7:
         ca:bb:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:01 2025 by rpki-client