Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa
File:                     982afe77-fc9c-3f87-a4df-328bd01590ad.roa (raw, json)
Hash identifier:          lA1xIPPy8Dq9Y77VP5SWUQWNYzUQIYTQViP9P1yRqRg=
Subject key identifier:   42:21:32:05:82:14:FF:69:9F:72:EF:C2:F5:A9:7D:77:B0:88:4D:26
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584AC2E1076CD87B659058E9F580
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        198.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:07:6c:d8:7b:65:90:58:e9:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=6d8776d1-89f9-4146-9e51-aea14df8ee30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:6f:54:a6:66:47:6a:06:98:1c:4c:38:51:
                    17:61:8a:57:ba:26:ec:b4:4a:e0:1f:67:b0:a1:7b:
                    15:6b:6f:91:5b:36:0d:a8:0f:79:40:c1:b3:68:cc:
                    26:3b:d9:78:67:0a:ec:eb:b3:e6:e6:f6:ff:d1:23:
                    26:77:e4:58:75:eb:36:4e:83:19:fa:28:6f:fb:85:
                    fe:24:41:da:b6:d2:58:9e:29:81:22:1c:21:90:92:
                    ba:e3:f4:78:09:bd:64:6f:8c:ec:22:05:b1:2d:f2:
                    3d:64:9a:f5:66:1a:03:8f:e0:33:af:75:69:4a:0e:
                    0d:a2:2a:73:d6:78:b4:64:ba:50:7d:c3:ef:f4:82:
                    73:53:fb:cc:2f:f1:29:e2:8a:6b:19:c6:f3:1e:f4:
                    7b:08:b8:bb:f2:48:33:e0:d2:b2:b4:08:72:47:d0:
                    25:96:98:67:e6:9f:ff:d4:ec:b3:96:02:21:16:fd:
                    02:86:a1:23:28:79:be:39:7a:e4:cb:21:03:3d:e0:
                    b7:4a:96:f6:0d:20:e5:b8:c8:40:96:71:ee:2f:36:
                    0e:e2:4b:d6:7b:16:22:9d:ac:52:a6:b1:38:a9:70:
                    82:74:e2:ca:57:61:b8:e5:94:54:5a:94:93:bf:8e:
                    12:dd:3c:bb:25:8c:77:23:01:6e:c6:9a:ad:d3:f5:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:21:32:05:82:14:FF:69:9F:72:EF:C2:F5:A9:7D:77:B0:88:4D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f8:08:e4:37:02:1a:cc:65:57:22:ee:2c:1d:00:81:ad:46:
         3b:4f:b5:8b:9a:dc:83:b8:56:08:d0:be:3a:3b:d3:63:9a:5a:
         7c:ce:95:88:c7:5a:db:b4:0f:8f:9c:a7:06:d8:5a:88:e2:9d:
         53:db:ee:00:e8:2b:94:84:9c:24:dd:dc:5f:96:8a:a2:5d:9f:
         7c:bc:4d:ab:7e:03:c9:aa:88:58:db:a9:9e:e5:33:56:5f:28:
         70:fe:96:ce:ad:11:76:99:b2:dc:92:a9:d5:70:23:11:9c:e9:
         43:8b:2a:0f:ba:21:0f:f3:7e:7d:3e:be:14:88:87:53:f2:90:
         ed:16:62:52:4b:57:bb:4a:6d:37:0f:e4:cb:e1:db:c7:a0:94:
         e1:6f:5b:a5:25:fc:5c:12:c2:b8:cb:43:b7:69:42:e9:85:7e:
         bc:ab:33:3a:c6:60:7b:1d:b4:55:39:f1:b3:ba:14:d1:bd:8d:
         25:7e:56:b6:98:af:92:78:73:f4:2c:2d:4d:20:f8:f7:99:7e:
         cb:ed:4a:2b:b1:be:d9:9a:c3:69:63:84:e6:80:93:c3:72:52:
         e3:77:79:e7:12:b1:08:7f:08:94:f5:ff:c2:52:95:ff:5b:33:
         7d:29:8f:58:83:7d:a8:a5:91:a4:92:ac:3e:a6:45:91:88:28:
         88:94:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:19 2025 by rpki-client