Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa
File:                     94d78e80-6902-346e-b310-45f257fd76f1.roa (raw, json)
Hash identifier:          f4xYOKhqnFZGm61PHnyZRsGMy1JjnvNk5n1Bg55no44=
Subject key identifier:   ED:2B:55:C8:71:FE:14:B3:0F:8A:D1:2A:F2:88:FC:9F:5F:11:7F:4A
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584A7FE091452258C4A09A8F2C80
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     53281
IP address blocks:        204.152.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:91:45:22:58:c4:a0:9a:8f:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=176b1e59-19cd-441d-b6a4-3f03a2455cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:2d:a2:39:7f:62:d6:f5:ee:3b:9a:d3:a3:
                    4d:6a:6d:24:09:20:6b:71:92:b9:bc:1a:9f:ff:d4:
                    0b:46:b2:6d:e8:62:3a:c8:1f:c5:4f:40:3a:50:e5:
                    c8:aa:83:d6:aa:fc:4d:02:3f:92:85:6a:9a:33:58:
                    f1:bb:f5:cb:06:40:28:0e:44:df:14:71:f8:ec:ce:
                    54:82:09:de:a8:cf:b2:c8:42:be:54:a0:b6:09:9b:
                    1c:1a:ed:d3:94:f3:ad:1a:53:57:71:7b:02:92:fc:
                    42:fb:06:05:bb:67:73:94:df:04:d3:c5:2a:08:1a:
                    3d:5b:e7:64:44:77:74:69:06:b0:95:1f:e1:09:2e:
                    55:06:8d:44:1b:1b:a2:b9:10:07:f1:e9:67:aa:a0:
                    34:c1:62:80:8f:31:ec:43:de:ed:5b:2c:5e:8d:50:
                    12:af:11:3d:c6:b8:05:7b:fd:20:13:b8:26:bb:cf:
                    34:2a:94:80:eb:6b:b2:6a:a2:85:cf:93:55:5a:cb:
                    46:cf:b2:25:1c:03:b6:10:7a:28:51:dd:b9:71:4b:
                    eb:c8:4a:54:b2:cf:5b:70:e6:f0:53:a5:c2:a9:62:
                    03:ec:11:70:40:07:10:a4:a5:43:8c:ac:1d:c3:b2:
                    3f:b7:01:ed:0a:7d:80:eb:69:70:e3:4a:fd:0c:e2:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:55:C8:71:FE:14:B3:0F:8A:D1:2A:F2:88:FC:9F:5F:11:7F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:5f:72:4d:6a:8a:4a:ab:86:6a:c2:d8:19:5f:f7:33:ed:
         c9:83:b6:20:83:42:f5:c8:1e:fa:22:16:48:d0:b3:d1:7a:74:
         8b:57:71:dd:c7:66:57:8c:81:56:fb:69:b2:36:5d:6f:4b:2f:
         bd:cf:e2:bb:36:0b:b5:2c:de:ac:e8:25:9d:16:67:26:4c:1d:
         88:2a:71:49:ea:56:18:42:3c:90:87:16:f1:43:90:4b:38:82:
         24:0e:6f:f9:99:9c:46:15:fa:14:ae:74:66:19:c0:f6:f1:3a:
         b9:64:b8:2c:db:d5:19:6e:5f:f5:13:17:49:35:f5:1f:ef:38:
         9b:7d:ea:32:3c:7d:b1:04:dd:70:c1:21:da:b8:b6:0e:f6:09:
         8b:23:67:ee:7c:b0:9e:dc:ff:b5:44:ae:2f:96:f9:fb:ca:32:
         f9:d7:56:c0:e1:aa:16:9b:88:7c:9d:9a:3e:6f:f7:92:8d:7c:
         ae:00:b2:2f:6c:95:c1:a8:a7:2d:5d:05:6c:d8:07:a8:a6:d7:
         15:3d:df:f7:18:43:d5:ae:4f:0f:50:ab:40:95:93:1c:6c:eb:
         c2:56:ca:9a:51:f3:3c:6f:be:53:d9:57:84:aa:74:18:99:89:
         57:d7:e1:46:f2:1c:d9:0f:d7:e6:45:26:b2:b8:41:d0:40:a5:
         6e:1a:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:56 2025 by rpki-client