Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0e472bad-a710-3bae-baf8-16afc5bd721b.roa
File:                     0e472bad-a710-3bae-baf8-16afc5bd721b.roa (raw, json)
Hash identifier:          kTod2AKX42aSr5PY8yOFV4jjubuJ02Og5xJURZZXk0o=
Subject key identifier:   A1:61:34:CA:D4:97:AD:44:FF:7B:79:74:29:6E:16:D6:9F:CF:0E:CC
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584ACE0B91F4767CC17E9C0FF980
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0e472bad-a710-3bae-baf8-16afc5bd721b.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     59210
IP address blocks:        125.253.91.0/24 maxlen: 32
                          125.253.92.0/24 maxlen: 32
                          125.253.93.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:91:f4:76:7c:c1:7e:9c:0f:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=b0180174-3e38-4f34-a9a9-c19781adbca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:51:fd:36:3f:51:4f:6d:cb:06:20:8e:ec:
                    07:7f:aa:a0:5f:e5:54:5e:b5:4f:3b:a4:73:33:a8:
                    32:57:6a:b0:6e:94:91:59:a3:4f:26:ab:56:8c:76:
                    02:9a:f6:2f:68:29:0a:68:19:10:1a:1b:94:ef:c1:
                    43:22:9e:2c:68:f9:2b:6b:87:25:16:6a:73:18:db:
                    86:ea:d1:54:84:15:8f:6a:84:8a:17:88:eb:92:5b:
                    0d:33:09:2f:2c:16:10:56:db:70:0c:31:cb:47:25:
                    d3:75:69:1e:f1:1d:3c:f6:60:f8:de:c4:4e:47:83:
                    d1:b0:de:93:dc:0b:58:18:c0:1b:49:cc:05:35:4a:
                    5f:6a:49:b3:c2:42:03:dd:2c:37:a5:4a:68:c5:17:
                    85:78:bb:9d:7c:68:eb:9a:ff:30:29:af:ee:a0:b1:
                    75:13:33:1a:cf:42:b4:f6:b9:26:ac:2c:53:fb:43:
                    c9:95:46:01:e8:a3:77:97:aa:51:fe:89:a6:be:0a:
                    ee:7d:03:38:11:4b:bc:66:9f:04:99:95:09:f7:d3:
                    ff:16:75:23:fe:aa:9f:49:56:9f:92:ba:c3:3a:c3:
                    4a:17:ff:24:a2:09:24:6a:3a:41:a4:37:69:a8:63:
                    38:61:25:9e:40:23:3a:be:d5:21:f4:89:0a:4e:2b:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:61:34:CA:D4:97:AD:44:FF:7B:79:74:29:6E:16:D6:9F:CF:0E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0e472bad-a710-3bae-baf8-16afc5bd721b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.91.0-125.253.93.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:22:1c:73:68:59:5c:7f:0a:b3:52:60:89:65:74:7e:1d:0e:
         78:be:5d:74:2b:fc:93:7e:dd:06:e3:50:bd:21:77:8c:97:be:
         be:17:22:6c:06:4a:71:e1:c0:c4:fd:09:8c:e0:c5:52:28:ec:
         8c:d6:cf:81:05:1a:e9:5b:fb:e1:77:b9:3a:e1:de:e3:e5:f0:
         b8:ed:dc:11:7f:51:22:fc:30:bc:4e:fe:d3:ad:a4:a1:7d:87:
         57:c6:4a:ee:1a:35:45:81:be:8a:2f:32:c3:70:6a:83:e6:5b:
         f1:b6:24:31:2c:ee:2d:57:0a:71:7f:37:be:95:87:92:95:16:
         d8:b6:3f:c5:ea:e9:00:a4:00:06:a3:2b:23:62:a5:47:92:cc:
         4e:a7:25:77:d2:61:ac:9d:6e:ae:7d:67:bb:21:98:35:07:3b:
         0a:d7:6a:8b:15:b4:c1:fd:d3:ac:d1:a4:38:fc:38:dd:74:b8:
         64:f9:51:7a:c7:14:6e:be:82:a2:55:eb:d7:d9:4d:da:2a:00:
         61:1d:28:86:74:13:f6:1c:f4:36:a3:ca:88:c8:9a:bf:f2:6e:
         0d:7a:e5:08:7e:63:19:e2:91:0f:4d:f4:01:90:c4:d8:ef:fa:
         a9:14:20:39:38:8c:a8:76:fe:64:32:b2:9e:9d:67:f2:99:bf:
         08:02:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:09:50 2025 by rpki-client