Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
File:                     cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa (raw, json)
Hash identifier:          r3FdmCEqDjxy3mY4ZEMYoqYI1MHeWbQnX3/GXe6ldM8=
Subject key identifier:   7D:1E:EA:F0:44:76:8C:EA:E7:D2:19:A7:17:B6:67:2B:2B:9C:DE:64
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584B4D11D0372FA55EB11DEEF600
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     54315
IP address blocks:        207.54.135.0/24 maxlen: 24
                          207.54.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d0:37:2f:a5:5e:b1:1d:ee:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=d9b03f8e-b6fc-41c6-b7c2-5bb7c02d8efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:ca:f7:fa:fe:a1:33:04:14:68:ea:b3:31:
                    af:18:b4:87:7b:ca:35:81:ac:f1:af:ee:99:36:f0:
                    67:ad:16:42:5e:bb:0b:75:78:8d:74:8b:f7:c4:2c:
                    c4:23:09:2e:9d:bb:78:75:89:00:1f:a5:69:b1:cc:
                    ea:f0:68:68:db:48:e9:f5:42:6f:bd:ac:8e:1f:f6:
                    4b:18:cc:3b:c9:bb:b4:e2:62:57:58:50:3a:af:a1:
                    7d:50:36:14:96:7f:a9:31:8b:2a:95:13:e1:2c:fb:
                    09:78:be:97:1f:fa:bf:37:10:d1:55:ab:cb:3e:64:
                    75:3f:61:50:f6:8a:03:cf:bf:0d:d1:98:66:bf:6d:
                    96:61:5d:91:8f:da:a6:f1:0e:37:63:13:66:79:c9:
                    99:a0:1a:ac:1c:85:f8:d9:94:8c:6f:1c:8a:72:f6:
                    08:46:4d:7e:65:7b:0d:29:87:f1:65:4e:eb:49:d0:
                    fc:84:2e:37:ac:d4:1c:0f:19:a4:80:4a:6e:cd:35:
                    a6:68:a7:61:e9:02:9b:4c:c2:35:89:b4:cd:64:fc:
                    2b:e7:cc:1e:07:a8:56:9f:fc:40:67:e3:0c:29:37:
                    99:c6:43:be:9c:c8:24:bb:94:56:5c:62:37:80:8c:
                    ea:5f:e6:57:86:b8:bf:34:e2:eb:dd:59:75:9e:5c:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:EA:F0:44:76:8C:EA:E7:D2:19:A7:17:B6:67:2B:2B:9C:DE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.135.0/24
                  207.54.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:1b:bb:ab:40:1b:3f:dc:60:84:c9:19:ce:3c:1f:10:2a:
         06:65:3a:5e:6f:70:24:6b:bc:79:dd:3c:bc:3d:3c:55:cd:72:
         40:0b:d3:19:c4:31:28:2c:2e:dd:b2:34:39:8f:fd:f3:1d:d9:
         46:25:cc:d1:1e:19:9b:d9:ac:5b:3d:98:fc:44:89:2a:60:86:
         d3:60:e2:d6:47:eb:ca:4d:7f:99:c3:5a:b8:8c:7a:18:15:4b:
         a4:76:df:a6:58:e5:f9:b0:d1:8e:aa:c0:d2:eb:59:10:ce:aa:
         23:1d:a8:d2:c1:c4:d8:b2:c8:e7:a2:57:f1:7e:0d:dd:d6:8c:
         2c:60:2b:47:5a:ca:1a:67:e0:b8:d5:1f:88:df:e4:f2:8a:8f:
         b5:f7:ef:b1:b5:0d:6e:db:b2:5b:f5:26:73:af:e8:7b:df:ee:
         75:62:8e:20:7b:6b:23:f8:ae:73:0e:e7:3d:66:4d:06:a6:36:
         bc:82:0b:7f:44:9e:6e:de:4f:c5:84:98:74:14:36:7f:73:21:
         73:18:07:4c:d6:9b:3c:14:89:6b:1e:2a:09:63:54:5a:03:ac:
         41:57:6a:50:bc:dc:db:d6:63:10:ad:df:0c:c4:4a:54:51:3f:
         dd:99:94:17:5f:a1:36:1d:81:b9:11:38:d8:7a:96:79:8b:d8:
         4c:22:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:31:26 2025 by rpki-client