Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa
File:                     e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa (raw, json)
Hash identifier:          swjoJavla9zk6/Gc4YP0rHZoDyzmoAQrwGgvliARuoA=
Subject key identifier:   44:B8:D3:8F:33:2F:A0:15:33:15:B2:38:65:36:A9:2D:C5:89:17:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE0319AF58D050754DB5C0C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        184.25.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9a:f5:8d:05:07:54:db:5c:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=b12571c4-0e88-4dee-bbdc-940d9f40848d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:60:cb:2a:76:b1:6e:f2:01:83:ad:91:bd:
                    2e:01:f5:ab:c1:e4:4a:bd:92:d0:71:70:06:32:f7:
                    c0:33:ed:14:ec:3e:91:56:95:85:4d:0d:9e:cd:4a:
                    ca:9d:17:ae:fe:56:e0:37:ce:30:fb:c0:6a:42:cc:
                    88:d4:10:7b:c2:54:0a:97:51:df:ad:66:50:c1:a6:
                    bc:ab:61:91:67:46:25:82:d0:81:4e:79:99:11:dd:
                    07:3b:e8:cc:a6:4b:48:65:e2:21:2b:fb:2c:ae:f7:
                    cb:ab:78:d5:ea:96:50:17:3e:64:18:23:92:ec:b6:
                    82:6b:33:17:b0:4f:99:6d:ff:7a:9e:89:0b:81:eb:
                    9f:d6:d4:38:7b:9d:fa:d5:d5:50:67:fe:aa:7c:ef:
                    82:ed:bd:3e:bb:aa:bd:1b:e8:ca:a7:6b:33:8a:3b:
                    c6:08:0b:a5:fe:23:29:0b:ca:9f:55:59:8e:ed:14:
                    af:93:7c:24:c5:e5:de:01:96:a6:c6:d9:ee:db:a7:
                    33:1d:80:a6:c1:09:b9:47:b3:50:69:30:40:65:37:
                    de:4a:67:54:5c:22:0c:60:e2:f5:28:4a:fa:a5:34:
                    65:33:e5:6c:04:f6:63:b4:d6:c2:bd:67:22:1f:6b:
                    d5:a8:a5:a9:ab:7e:b6:2e:b9:3b:81:e2:f0:f4:f2:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B8:D3:8F:33:2F:A0:15:33:15:B2:38:65:36:A9:2D:C5:89:17:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b3:12:e0:12:6f:9a:77:30:0e:61:88:c6:03:1f:43:ad:86:
         ae:9f:aa:61:88:dc:9f:b7:df:a7:9e:0b:1c:07:af:ff:1b:53:
         c1:c4:98:e3:45:42:f2:dd:83:74:76:a8:df:03:17:67:57:84:
         b2:1c:cf:83:b1:1d:d2:d6:95:69:d4:f5:70:3e:4d:1f:8f:18:
         98:3c:be:c2:8b:4b:82:0e:bf:63:a2:64:9d:cf:0a:b6:0d:18:
         20:69:50:85:2a:52:ac:bd:f3:97:22:cd:27:43:b0:a8:79:a9:
         ca:9d:b6:85:34:ad:e0:64:fc:6a:e6:f3:2f:7f:10:8f:38:c4:
         b2:dc:01:fe:aa:b2:db:72:09:a5:9a:ad:a8:fb:0a:34:69:67:
         3b:7c:8a:c2:ce:80:a6:5b:75:03:67:50:08:d7:67:3e:fc:4a:
         19:f8:0c:ec:96:36:30:30:29:8d:2d:44:c2:92:25:1b:f6:65:
         ef:fe:00:cf:a0:73:06:ae:00:9b:0c:38:61:6a:62:c1:12:33:
         ca:6e:71:a4:02:30:de:c6:a1:48:71:af:ad:b7:2c:11:43:c3:
         73:47:d6:7d:f0:76:12:37:6f:47:e9:13:4e:96:25:f3:94:a4:
         86:c8:89:26:29:9a:27:51:01:97:eb:1f:5b:56:d1:06:f7:b6:
         9e:7d:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:38 2025 by rpki-client