Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b7fbc9c-b8fa-3bf0-9ec4-fa5e422bf56d.roa
File:                     5b7fbc9c-b8fa-3bf0-9ec4-fa5e422bf56d.roa (raw, json)
Hash identifier:          EK4uFn4xf+f3bfCPMID2ekzVIXUd2gB/u8mVUxyob7k=
Subject key identifier:   D7:E5:CF:B7:D3:B0:A1:03:65:2F:2F:F8:91:86:21:12:99:05:D3:51
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584AEEA64750219DCCC8ADD32F80
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b7fbc9c-b8fa-3bf0-9ec4-fa5e422bf56d.roa
Signing time:             Thu 21 Aug 2025 17:18:11 +0000
ROA not before:           Thu 21 Aug 2025 17:18:11 +0000
ROA not after:            Wed 19 Nov 2025 18:18:11 +0000
asID:                     214309
IP address blocks:        152.232.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:a6:47:50:21:9d:cc:c8:ad:d3:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Aug 21 17:18:11 2025 GMT
            Not After : Nov 19 18:18:11 2025 GMT
        Subject: CN=5562e0b3-55d7-48ae-9e4e-3c79dd3e9593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:71:25:c1:cb:46:23:a1:ba:c9:67:4b:78:
                    8b:75:6a:f9:a9:f9:8f:d9:04:3c:f7:56:0f:99:2f:
                    b2:39:2b:c3:db:17:2b:fa:87:70:26:8c:61:8d:83:
                    fb:ce:2e:0b:18:f2:75:86:88:6b:65:38:6c:ed:c0:
                    41:26:77:a2:26:f9:13:7b:29:8b:d2:33:6c:e7:00:
                    e0:fe:9b:ab:54:d2:f6:2c:be:ce:f7:42:c5:4a:0c:
                    91:e5:d3:d9:0f:e3:84:df:f9:33:45:0d:c3:b9:8f:
                    0e:70:ef:72:96:1a:38:f6:3e:f1:b1:74:f9:5d:45:
                    62:a9:ba:d4:08:20:1a:ea:01:35:c6:df:4d:f9:4a:
                    10:ca:39:4e:bf:93:f0:a6:e7:16:fa:e7:41:a3:58:
                    2e:0d:28:ab:31:53:61:8c:6d:49:c2:f3:fc:9f:b0:
                    20:a4:5b:a9:0f:ba:fa:ae:a6:00:bd:72:5d:48:c9:
                    b0:eb:f2:8b:a6:06:3b:92:64:55:76:6e:87:a5:64:
                    9c:93:af:6d:5f:c3:be:41:0b:01:18:41:03:c5:fb:
                    53:2e:86:b7:de:a0:e3:3d:ee:c9:d5:1c:91:a7:4f:
                    5a:bf:d5:2c:c4:68:fe:e0:38:0a:09:61:48:12:bc:
                    86:e9:72:3e:21:38:dd:d3:bd:fa:4a:fa:af:2d:9b:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:CF:B7:D3:B0:A1:03:65:2F:2F:F8:91:86:21:12:99:05:D3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b7fbc9c-b8fa-3bf0-9ec4-fa5e422bf56d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:5f:fd:19:1b:d5:d7:c5:c0:a3:a0:2c:ed:24:25:bf:d7:
         9c:43:be:d7:67:e9:05:e9:88:a9:b9:e5:30:07:3c:0f:81:df:
         7c:d3:0a:53:50:9a:e2:eb:53:ab:e0:dd:11:1c:a0:88:75:50:
         0d:2b:d1:fc:38:43:20:1b:03:1f:c1:41:39:ed:36:3d:c8:3d:
         80:2e:f6:71:e4:ff:a2:31:4a:d2:f6:6f:60:64:27:be:a6:dc:
         d9:73:b5:ee:2d:9a:c4:b9:68:1d:20:9e:67:ab:40:37:19:60:
         5d:1c:9b:bc:87:8b:6e:ec:eb:2e:85:31:24:ec:89:08:37:34:
         79:69:fb:1c:aa:57:1e:07:a3:8a:0d:67:71:8b:e0:6b:05:42:
         0c:79:d9:11:34:a9:a4:b7:de:c0:74:ff:9b:61:04:e2:f1:39:
         d0:2e:ac:04:b5:3e:40:a2:a4:05:50:58:15:45:be:da:5f:7a:
         57:50:3a:7b:61:5b:08:10:c6:27:e5:4b:78:ee:77:15:59:e2:
         6f:d1:10:82:b0:4e:10:c2:32:c6:cd:2a:a5:f4:ec:4a:9d:83:
         ac:bd:79:e9:86:29:84:72:8b:46:87:e3:0e:4d:19:36:62:41:
         d6:5a:5b:84:e0:c8:b3:47:91:5d:8b:4d:e2:85:c3:83:89:80:
         8c:9c:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:42:12 2025 by rpki-client