Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa
File:                     d5c5e304-938b-3145-b72c-bc916e50e0c5.roa (raw, json)
Hash identifier:          zgLRIjlbkXQQxeeznA5HoZdxp3uNtKBmSXeOagkU1Fw=
Subject key identifier:   34:B6:9C:F8:BB:91:09:18:2D:14:82:07:35:C3:F4:FD:45:A8:3A:56
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584AAB265F38954EA902D6161800
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     397666
IP address blocks:        167.253.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5f:38:95:4e:a9:02:d6:16:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=aeb8398f-02ab-45fb-9e82-6dbd50c17c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:3a:bb:73:ac:b8:01:a5:69:2b:90:bf:64:
                    28:66:99:8a:3a:09:24:28:4d:b8:b2:07:ad:c8:6d:
                    80:e0:5a:fb:cd:4a:7a:20:9f:ba:4e:c1:a7:7b:67:
                    78:9a:95:52:b4:a5:15:a5:1c:dd:82:7d:a0:40:12:
                    f4:23:e9:f3:33:8d:78:c4:c9:73:04:3f:dc:7a:cc:
                    44:0b:5f:80:64:dd:54:a0:c9:83:ff:57:bf:0d:6a:
                    78:66:e9:68:4b:a3:14:75:6b:26:af:d3:c6:f4:9e:
                    97:1e:4a:9e:c9:1d:6a:db:45:0f:4a:1a:b0:36:9d:
                    45:23:e8:06:00:5d:54:36:74:b4:5e:be:d4:74:cd:
                    82:6b:3d:b3:f1:53:17:74:b3:76:83:4c:a5:fc:9c:
                    c4:79:da:ee:d1:e4:e9:12:74:18:38:d4:f5:1c:6d:
                    96:67:77:23:5d:8e:d2:54:0b:50:18:a5:cc:2f:3f:
                    6b:81:dc:97:5f:ce:ca:f5:c5:14:34:c7:2c:8f:ac:
                    08:01:05:80:ac:2c:1e:cf:b2:e6:4f:06:f1:a3:ab:
                    8a:63:82:92:60:bc:d7:64:fc:eb:94:c1:0f:0d:26:
                    2e:f8:10:27:d6:b3:e6:5e:f1:53:3e:43:08:c0:1e:
                    3c:30:a3:ab:27:17:81:fa:ad:93:c4:81:e9:fc:e4:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B6:9C:F8:BB:91:09:18:2D:14:82:07:35:C3:F4:FD:45:A8:3A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1b:61:4c:04:9c:ee:3e:f5:ba:4b:a6:0d:d6:29:53:86:99:
         e2:0c:79:ad:1d:15:fb:30:cb:86:7e:70:b0:8d:52:43:4e:f5:
         af:4b:f7:8c:39:e0:51:64:fa:4e:4a:f2:37:bd:ae:ca:dc:7f:
         ec:16:2c:ab:8b:81:b8:e9:c0:9c:a6:2a:a7:57:73:24:0b:64:
         f6:1c:b9:91:56:b3:30:57:5e:70:08:81:e7:b3:9a:53:60:5e:
         46:bc:3c:7a:ea:e6:19:b9:18:3d:68:58:66:5d:bd:1a:56:8e:
         f6:49:14:b5:be:05:79:b3:e2:de:5e:1c:6b:12:a2:7b:d8:3e:
         d3:2b:04:de:82:c7:0a:4a:f2:8a:19:f7:04:85:41:f5:03:02:
         9d:f9:e1:6a:d0:92:58:1c:62:62:b2:51:f0:97:0e:94:e1:64:
         db:18:f1:22:a2:e1:4b:1c:f3:35:7a:c0:87:83:6c:2e:9c:56:
         fb:f5:8b:a1:19:9c:17:56:bb:d5:da:8f:bd:46:c8:6f:70:20:
         ae:ca:52:ca:6e:af:f7:36:4c:c8:d8:17:0d:ed:d7:0b:6b:3a:
         41:87:f8:ad:f8:1c:82:61:04:a9:5e:92:c9:bf:51:d6:64:50:
         cf:ea:86:57:0d:da:4b:d5:96:36:19:bd:da:6c:45:f3:b6:3b:
         9c:eb:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:17 2025 by rpki-client