Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/7a55230b-af99-3be9-a509-4bc56d557954.roa
File:                     7a55230b-af99-3be9-a509-4bc56d557954.roa (raw, json)
Hash identifier:          f3RW1w8SzjvtlxFKVdQS21Z9msNMXkBSH2KIjhp8bIw=
Subject key identifier:   75:2C:D0:6C:BE:AF:93:BE:DC:D7:9A:39:2A:45:F4:C9:11:F0:C3:70
Certificate issuer:       /CN=d5355e60-f53c-4707-ae46-30946e26bcde
Certificate serial:       010D0C9F4328584A62909003AD9A451F6FBA6360
Authority key identifier: 57:62:13:57:D1:72:E3:C4:86:80:E6:04:9F:24:2D:99:33:D4:5E:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/7a55230b-af99-3be9-a509-4bc56d557954.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     54544
IP address blocks:        209.160.109.0/24 maxlen: 24
                          2620:76:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/d5355e60-f53c-4707-ae46-30946e26bcde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/d5355e60-f53c-4707-ae46-30946e26bcde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:90:03:ad:9a:45:1f:6f:ba:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5355e60-f53c-4707-ae46-30946e26bcde
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b29a6dbc-aa75-4985-8a73-018ae7ae7fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:86:44:ee:37:bc:94:f4:a3:a0:10:3d:cb:
                    27:22:10:7e:e8:38:12:79:1e:7f:4c:26:8f:a4:ff:
                    6e:9b:18:00:b2:1e:34:74:a5:9a:8f:11:93:7f:bd:
                    70:13:f1:4b:0f:01:05:16:db:a9:9d:43:93:58:cb:
                    a0:d7:45:0f:f2:a5:10:e2:42:68:9a:95:6f:0f:25:
                    6e:51:f4:78:67:3f:e3:f3:99:d5:0b:03:f9:09:b8:
                    a3:65:f5:4b:d6:6d:7e:d6:57:91:45:cd:e5:a6:07:
                    b0:23:4b:e3:d9:28:29:04:82:62:21:dc:e4:7a:96:
                    e3:78:6d:64:cc:91:5e:5a:0d:35:a8:b7:32:3b:61:
                    e8:ae:ce:02:96:29:a6:6b:1d:af:3a:77:ad:29:cb:
                    3e:0e:33:20:f2:46:17:22:95:d4:c5:e2:2e:ec:f7:
                    70:ec:38:04:40:58:d1:3b:4f:c9:0d:8d:58:f0:b3:
                    5e:b5:11:f9:8b:99:9e:b1:f4:ef:3d:00:37:74:b2:
                    d0:cf:6f:66:c6:58:db:9b:c4:f6:e8:97:19:48:06:
                    fe:d9:aa:d3:e1:76:ee:15:89:81:53:73:46:43:10:
                    be:f8:ec:06:a3:aa:d4:4b:28:58:2c:b2:bf:ee:a5:
                    f5:49:ed:24:4a:60:04:69:cf:c0:c1:48:20:fa:eb:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2C:D0:6C:BE:AF:93:BE:DC:D7:9A:39:2A:45:F4:C9:11:F0:C3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/7a55230b-af99-3be9-a509-4bc56d557954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/d5355e60-f53c-4707-ae46-30946e26bcde.crl

            X509v3 Authority Key Identifier:
                keyid:57:62:13:57:D1:72:E3:C4:86:80:E6:04:9F:24:2D:99:33:D4:5E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.109.0/24
                IPv6:
                  2620:76:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:7c:1b:52:fc:2a:dc:fb:5f:ad:2b:71:75:24:cc:7a:56:
         2a:7c:fb:0a:fb:43:04:b7:1b:f2:21:dd:57:f3:20:27:90:e0:
         60:57:50:d4:bf:16:50:52:91:b7:1e:01:71:97:97:b8:b5:56:
         89:72:40:bf:a5:17:15:52:80:3e:b9:a7:c5:27:65:11:8a:da:
         6f:20:f0:78:89:ae:76:e1:51:f0:dc:23:3e:ff:83:55:d8:74:
         47:9c:10:ad:3e:15:07:12:05:9e:34:72:81:66:bb:56:aa:19:
         c0:41:0a:53:eb:a1:89:10:56:84:a9:c6:95:e2:58:a3:eb:5a:
         1a:7e:8d:2a:13:be:69:36:26:18:ce:0f:d2:4f:22:8a:03:e8:
         35:cc:ea:8f:a6:49:e1:c9:1b:b1:34:32:2b:37:f0:69:0d:78:
         f7:cb:20:73:d9:9f:9b:c9:39:98:72:73:9c:fc:d2:ad:dc:2b:
         65:ed:cf:00:0c:d4:65:cb:c5:de:59:4c:53:8f:cd:a9:1b:8b:
         0f:ff:f6:b5:f5:5f:28:b3:71:8a:c5:e7:76:2f:ad:dd:18:18:
         39:a2:36:a0:59:09:07:80:91:cb:ac:c2:3b:34:c8:a9:07:3f:
         a2:be:1d:4f:89:e2:50:1d:0e:d4:72:7a:14:93:06:78:76:13:
         b7:ff:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:50:54 2025 by rpki-client