Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa
File:                     bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa (raw, json)
Hash identifier:          in+USxotk7nFvA69QMJnyNV6PUOIvT3enJepc16Eb1Y=
Subject key identifier:   AF:91:43:49:4F:7F:57:27:D7:DB:6A:90:8C:CC:D7:10:72:46:A0:D2
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584A51AF00B07CB48960E1FDED80
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa
Signing time:             Thu 26 Jun 2025 11:53:51 +0000
ROA not before:           Thu 26 Jun 2025 11:53:51 +0000
ROA not after:            Wed 24 Sep 2025 11:53:51 +0000
asID:                     2914
IP address blocks:        108.59.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:af:00:b0:7c:b4:89:60:e1:fd:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jun 26 11:53:51 2025 GMT
            Not After : Sep 24 11:53:51 2025 GMT
        Subject: CN=c386ede5-d05a-4d5b-b666-9ebc97b721d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fd:50:92:f5:60:f9:dc:7f:ec:77:42:22:c8:
                    ef:d7:3f:c9:4c:d6:d7:54:29:c9:fd:d2:74:f2:0c:
                    c8:da:3b:3f:4b:65:57:b3:a5:21:bd:7d:12:f3:6b:
                    b2:92:64:5e:d8:66:ea:d4:be:dc:64:47:0f:13:f2:
                    9f:99:7c:02:70:8c:2c:09:62:0f:ed:80:6d:86:9b:
                    32:f9:1c:af:72:f2:d6:ef:ad:6b:fd:2f:44:56:1d:
                    fc:99:26:67:3b:95:4f:97:92:12:13:5a:79:4f:51:
                    35:0b:b2:7c:ab:e1:4b:ea:ea:7e:eb:ba:b2:27:fe:
                    03:96:48:07:2d:f6:ac:78:94:f7:b1:43:b6:eb:d4:
                    a2:e3:63:70:0a:6e:97:1f:03:81:54:12:a9:ed:9a:
                    84:ce:6d:7f:52:7b:4c:e7:63:61:a5:a1:94:af:dd:
                    81:95:f4:ed:68:d3:06:aa:19:d2:e6:48:4c:15:e9:
                    f3:35:76:e2:2f:5c:db:61:70:74:15:f2:0d:6c:98:
                    c6:29:45:89:68:49:77:b5:e1:bd:07:f5:f4:2c:ca:
                    ed:a6:d2:3b:22:93:7f:40:fd:de:20:6a:b5:14:31:
                    b9:a9:ad:05:8a:26:3d:24:53:54:a0:1a:27:b2:1b:
                    4d:90:c1:83:21:2a:41:75:b2:91:a0:bd:33:77:89:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:43:49:4F:7F:57:27:D7:DB:6A:90:8C:CC:D7:10:72:46:A0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:55:b8:9f:ea:fa:e9:8e:87:4e:37:2f:7a:da:21:33:75:
         f5:3d:bd:dd:98:ba:b3:32:f5:4a:c1:8e:2f:c1:b0:f4:cd:d1:
         93:53:26:1a:7d:7a:a2:c9:e7:8b:94:64:dc:dc:ff:dd:ba:eb:
         37:f1:aa:67:f8:cc:d0:f7:c9:65:56:c9:45:d8:06:45:b2:c7:
         6e:98:78:d1:cb:d5:09:38:92:cb:74:4a:e1:31:de:24:01:b5:
         43:d3:48:ae:c1:aa:b7:5f:c0:e1:b9:ad:42:a7:d3:f6:62:05:
         e2:bf:77:34:fc:b3:e8:8c:8d:e7:88:81:7c:f0:a9:eb:4e:12:
         3b:02:3d:b3:75:d2:9b:29:9a:4f:56:a5:5e:d0:37:93:5f:f6:
         f3:4f:7f:26:70:1a:31:6a:58:80:fb:6e:6b:35:ed:f1:45:f9:
         20:de:ef:06:a5:1e:e7:af:ed:37:cc:f9:89:65:c8:1f:53:be:
         1e:2d:8f:2e:7f:c7:e9:2d:4c:21:f7:ed:46:77:88:cb:6b:6d:
         cb:6a:4b:8f:cf:b7:bf:24:70:26:85:99:37:6b:76:c7:68:f5:
         2b:47:db:2c:27:93:8f:26:1d:b9:0a:ff:42:e0:57:51:f6:ff:
         5a:9c:6c:99:d8:3c:d0:22:14:e9:b5:7c:d8:91:e3:bd:b9:6d:
         9e:95:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:27:48 2025 by rpki-client