Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975/249d8546-75d0-30ee-b58e-5ec0a0ff89cb.roa
File:                     249d8546-75d0-30ee-b58e-5ec0a0ff89cb.roa (raw, json)
Hash identifier:          rRL9QL6ZCvAYMi4nqTSMH2toXevSJhC2xiadCoCBfIg=
Subject key identifier:   5B:0B:FE:44:0F:56:99:29:38:E6:B2:0A:85:EC:E1:2D:EE:4B:0C:6E
Certificate issuer:       /CN=01f3466d-f1b2-4e25-9d89-0d4a0c8bb975
Certificate serial:       010D0C9F4328584B88575AE18BBD0F8D6B2C7300
Authority key identifier: 83:0B:B0:D8:5A:1E:1B:30:C4:DD:B8:C3:7D:94:01:F0:A8:9C:25:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975/249d8546-75d0-30ee-b58e-5ec0a0ff89cb.roa
Signing time:             Tue 26 Aug 2025 05:19:49 +0000
ROA not before:           Tue 26 Aug 2025 05:19:49 +0000
ROA not after:            Mon 24 Nov 2025 06:19:49 +0000
asID:                     26030
IP address blocks:        23.139.204.0/24 maxlen: 24
                          130.12.88.0/24 maxlen: 24
                          2602:f63f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:57:5a:e1:8b:bd:0f:8d:6b:2c:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3466d-f1b2-4e25-9d89-0d4a0c8bb975
        Validity
            Not Before: Aug 26 05:19:49 2025 GMT
            Not After : Nov 24 06:19:49 2025 GMT
        Subject: CN=b9cd32b5-cf3a-41e8-bda6-f1b1aa5966f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:3e:02:fd:61:7c:d1:d8:14:a6:71:f9:66:
                    0c:a9:e2:23:1b:3c:2a:f0:55:b7:5b:ca:bf:0f:29:
                    b1:ac:e6:65:76:b4:b6:7c:f0:59:88:f6:ca:75:98:
                    ae:24:89:24:f6:64:3d:40:91:04:2a:9e:e2:d5:e1:
                    35:ae:29:d0:47:d5:99:8e:15:c1:77:6f:b0:e5:60:
                    7f:dd:a0:3d:eb:07:01:62:19:cc:b2:f4:ea:37:7e:
                    63:9e:b5:e7:5e:9d:a5:c4:c0:71:d0:32:68:ec:17:
                    3c:60:d3:78:e0:b6:62:6f:35:e2:59:d4:9d:99:f5:
                    8f:6d:56:81:72:a4:2c:91:24:e9:f5:e4:0c:7e:68:
                    35:7e:15:4a:b9:ca:7a:c2:53:fc:4d:88:5b:1a:4e:
                    3d:a5:b7:ea:6c:67:d5:35:d7:2c:95:a6:b1:2f:5c:
                    76:45:bb:34:00:07:ab:b2:34:0f:d6:9e:5b:c2:58:
                    53:88:3c:8c:c9:5d:31:24:66:2b:7c:6d:79:ad:17:
                    b4:ba:0d:da:85:85:a0:74:d0:d1:78:c4:7d:d6:a3:
                    d9:35:03:2d:d5:25:ac:fd:32:3d:10:9c:0e:ae:d6:
                    d7:04:32:b6:4e:83:0b:62:e2:08:52:1a:68:87:9f:
                    cc:3e:ef:a5:c7:72:5a:f6:a5:00:52:7f:9a:40:3f:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0B:FE:44:0F:56:99:29:38:E6:B2:0A:85:EC:E1:2D:EE:4B:0C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975/249d8546-75d0-30ee-b58e-5ec0a0ff89cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975.crl

            X509v3 Authority Key Identifier:
                keyid:83:0B:B0:D8:5A:1E:1B:30:C4:DD:B8:C3:7D:94:01:F0:A8:9C:25:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/01f3466d-f1b2-4e25-9d89-0d4a0c8bb975.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.204.0/24
                  130.12.88.0/24
                IPv6:
                  2602:f63f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:1a:c1:16:71:8d:c9:85:05:1b:52:dc:8a:5f:e1:7d:b4:
         07:4d:67:5b:7e:42:fe:c3:d3:5b:8c:ef:37:1f:95:46:e4:51:
         96:58:fc:aa:8a:e6:f0:d1:a2:81:1e:6a:2d:8f:c2:6a:70:33:
         5b:70:84:11:0d:bc:47:bd:95:2f:68:45:03:d3:f1:36:08:c9:
         c8:b8:df:73:60:17:5e:1d:34:0c:f0:52:75:6b:14:14:6d:a6:
         1b:ba:47:8d:09:2a:7c:a8:38:e3:de:05:7d:bb:80:d8:af:5e:
         80:e5:04:3d:52:53:ba:f9:de:c0:64:b1:e5:8d:ab:ee:2c:30:
         88:22:8b:3b:f1:19:27:8d:c8:6a:c4:ac:e4:62:c8:bc:37:51:
         e8:72:65:01:05:9a:c6:a0:37:50:ef:7a:3b:99:08:22:e8:66:
         4c:25:6f:f5:40:19:b0:8e:3c:0a:b9:84:2e:95:42:fc:49:70:
         ae:52:28:b8:ec:14:6e:28:8a:7b:a5:cf:76:26:5a:b3:88:f4:
         b2:47:2c:22:ec:ab:69:8d:8a:70:99:e1:36:20:5a:80:e4:a6:
         0e:38:92:fa:8f:94:dc:7a:c0:ca:02:81:0d:ba:b2:2a:f2:66:
         10:e3:c3:c7:76:de:04:01:a1:39:bc:27:73:1a:6f:af:7c:53:
         c0:e7:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:34 2025 by rpki-client