Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa
File:                     f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa (raw, json)
Hash identifier:          BKkJf0e2PUI/g8DpQ/RThf9XvqUaOkPUvC1uZZ2Ylvw=
Subject key identifier:   6D:02:7F:6C:CE:44:21:A7:0D:C0:72:5F:A2:26:87:88:0F:AF:14:AA
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A3E45A6C0386B7F8318B754C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     262287
IP address blocks:        198.145.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a6:c0:38:6b:7f:83:18:b7:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=ef9a623c-6fc4-4686-a76c-14d51eb0e00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:ab:3d:92:eb:4d:57:bb:aa:6f:67:2b:5d:
                    43:59:20:44:72:04:17:36:d9:17:bb:13:8a:03:ab:
                    b6:44:5b:ca:87:74:de:90:7c:c4:ce:da:46:6b:cc:
                    96:5a:a0:a3:ac:8e:5e:b6:81:ee:5b:bd:e3:a9:ad:
                    8c:27:52:58:77:98:2b:7a:7c:d8:d3:54:74:1a:87:
                    3b:81:c6:ef:7b:a3:17:5c:34:3e:f6:13:63:cb:6e:
                    ed:d2:79:8d:5e:f1:dd:40:9b:a8:bb:87:98:ce:3c:
                    e7:a7:80:1a:84:6b:7d:9d:90:70:9e:d5:3e:62:5e:
                    49:1b:74:ce:b8:dc:70:49:c3:86:fa:3f:e0:aa:86:
                    7b:ec:66:e9:69:1e:6d:f1:ea:f8:74:48:0b:3b:8c:
                    ca:d3:92:ab:91:ed:38:4f:d3:fd:7b:c4:23:f0:c5:
                    36:50:86:2a:9b:22:b7:f4:1e:57:9d:c2:de:09:40:
                    9b:41:52:1a:d5:ab:14:b5:ca:5d:39:19:12:73:d9:
                    a1:b4:dc:e9:f0:97:3e:20:a6:01:d9:b0:15:35:53:
                    d4:b0:f0:f2:3b:0f:0a:60:67:96:3e:7b:bc:ff:13:
                    0e:09:00:19:01:d0:2a:1e:a8:f7:58:84:f1:05:ed:
                    91:e2:1b:67:45:bc:1d:16:f4:95:c3:5d:68:63:d6:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:7F:6C:CE:44:21:A7:0D:C0:72:5F:A2:26:87:88:0F:AF:14:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:a2:89:3d:cf:c3:09:c9:27:71:37:89:18:af:30:95:b9:90:
         47:0f:9b:d8:33:94:b8:e5:cc:81:95:7c:31:2e:f5:ea:42:71:
         4e:94:4f:27:dc:2a:6b:bc:11:7a:da:3a:6f:97:ae:85:ea:5c:
         ae:d3:0f:c8:11:97:e6:ca:f0:b7:4a:e5:04:8d:f7:1a:66:18:
         a8:7b:eb:4a:94:13:17:59:73:73:77:9b:38:40:c5:10:f8:19:
         e0:e0:85:9f:cd:a2:97:11:81:ee:71:51:4f:f9:2a:13:e2:4f:
         5b:ff:98:fe:8a:72:31:9a:d6:8a:dc:4b:a7:c3:e3:9b:f0:b6:
         4b:fc:56:d1:46:e9:ae:6f:eb:61:7f:75:4b:b9:a8:6e:5e:de:
         a7:b0:6f:68:99:d2:51:da:0c:c8:ea:78:09:4a:01:0f:28:c5:
         30:d9:10:12:11:87:bb:d1:97:54:e2:83:12:fd:ec:a7:06:5c:
         78:4f:39:c7:21:7a:be:9a:8f:ae:90:34:f8:c4:ec:a9:47:e7:
         c4:79:8f:8f:6f:f6:14:01:d5:60:04:5d:7d:1b:70:5f:3c:97:
         43:b0:24:79:86:1d:6b:83:83:aa:30:5a:e2:10:ae:1a:23:5e:
         6e:cd:ce:5a:c5:35:8f:fb:65:0d:a0:77:bf:16:17:dc:7c:22:
         99:da:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:26:03 2025 by rpki-client