Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0da9790f-af76-334a-8b86-cbd19fc64d6f.roa
File:                     0da9790f-af76-334a-8b86-cbd19fc64d6f.roa (raw, json)
Hash identifier:          HtSdpN/XE+uesHrt0d1J8awyakO+r0jRw8jzJoOwO8E=
Subject key identifier:   78:0D:37:42:CE:67:2E:CF:11:60:43:1B:D3:57:41:4C:8D:DF:0E:7F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B1FA5C747F2662D1F96C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0da9790f-af76-334a-8b86-cbd19fc64d6f.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        151.101.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:1f:a5:c7:47:f2:66:2d:1f:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=589d3bc0-6f99-4a36-ac07-915650a9424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:dd:ac:01:bb:c6:f2:8e:4b:d9:40:a7:da:
                    3c:e5:db:91:50:04:de:54:07:6e:f8:7c:cf:33:48:
                    68:e6:f1:3c:87:2f:d6:d4:4d:1c:01:73:ff:c3:04:
                    6e:6b:59:bf:56:a4:6f:41:db:54:2a:07:5e:82:44:
                    0c:f9:98:4c:52:81:5d:77:d2:86:10:4a:f6:3e:9a:
                    83:b5:6a:cd:d9:09:a2:84:2a:4f:53:87:0d:14:ad:
                    b6:0e:e9:8b:e4:7c:b8:a8:67:32:df:f2:5d:28:5b:
                    d6:92:be:ac:64:0b:f4:85:d7:60:2b:db:1d:83:5d:
                    39:8e:fc:07:77:11:6a:d1:eb:39:e7:89:3c:fb:70:
                    51:10:a3:8e:09:c1:d9:bd:04:c1:45:0b:2e:b8:69:
                    5d:ac:9e:bb:0f:da:aa:5e:69:b3:3b:a0:ab:43:65:
                    91:33:2a:ef:48:ad:dc:02:5b:6f:98:c5:ab:6a:be:
                    25:e0:18:37:b3:e2:36:6a:07:dc:75:4b:72:f5:4c:
                    3e:da:0d:23:d0:65:30:f6:50:1e:9f:bf:4d:fe:64:
                    d4:64:0d:68:42:d1:c5:45:13:be:10:9c:e8:d9:07:
                    02:fe:a2:f6:dd:a7:9e:ec:98:7a:05:8d:60:de:be:
                    5a:b1:c8:4d:04:78:a8:78:e0:f3:73:bc:05:e2:4b:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:37:42:CE:67:2E:CF:11:60:43:1B:D3:57:41:4C:8D:DF:0E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0da9790f-af76-334a-8b86-cbd19fc64d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:0e:68:52:2e:65:ae:13:d7:55:8e:14:e0:32:88:3f:11:
         23:28:9f:35:43:87:e3:9d:c7:b3:06:fc:a2:3e:4a:82:a8:9c:
         48:e4:4f:de:82:aa:b9:3f:c5:df:ba:2e:f5:a9:4a:6a:7e:fa:
         52:61:49:b0:f0:45:77:4e:bd:1e:5b:b0:dc:1d:25:53:46:3b:
         36:fb:70:19:6e:29:2e:9f:9c:0b:d2:aa:f5:ea:fc:97:9d:7f:
         d2:4a:e9:e4:44:74:aa:3b:17:20:4d:9e:96:c7:9d:cc:12:1e:
         ba:35:d7:e4:53:4f:e3:f7:a4:ae:c6:df:b1:66:40:f6:71:bc:
         b1:ca:d8:e3:36:a1:52:78:a1:c5:0a:ad:db:57:1a:e0:4b:50:
         0d:ee:4a:4a:89:99:2c:5f:bb:47:d9:27:be:ae:32:1c:eb:06:
         1f:fe:58:38:80:33:9f:3c:dd:80:7b:20:9d:8d:c0:d3:8c:67:
         d6:e6:23:4a:20:3f:12:6c:25:32:70:0e:40:2b:94:7d:35:9d:
         2a:2f:28:d5:50:ba:81:b6:f2:f4:10:a7:c0:a5:06:30:85:2a:
         fd:04:ed:f7:c0:f6:58:70:8a:2b:a9:b3:bc:bf:da:6f:e5:fd:
         e9:d1:7f:99:e4:55:69:b2:bc:d2:20:b7:77:ff:56:aa:73:c5:
         14:1c:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:29:42 2025 by rpki-client