Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa
File:                     cc509968-63d9-33f6-b60c-2664e0511e7f.roa (raw, json)
Hash identifier:          /sN+uznXg1e43eXvktUmz9KKb4+bAyD29eLk24nqK7E=
Subject key identifier:   66:FD:F7:17:DD:76:2B:54:9B:14:B5:AD:72:1F:D8:60:83:67:BD:E9
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584AA42B8A3BC496F99B1F167500
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        144.81.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8a:3b:c4:96:f9:9b:1f:16:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=db641360-404c-4047-8b66-15d4a3702c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:45:d8:e5:f5:06:bf:0c:8d:dc:c1:6d:04:
                    ca:61:e6:bc:6d:91:09:e8:9b:fa:d1:3e:8d:78:15:
                    1c:ec:cd:44:aa:46:22:d7:9a:ee:63:88:a6:19:fc:
                    19:a4:2b:13:b3:93:2d:70:84:92:25:db:88:81:63:
                    0b:86:21:61:7a:a9:96:5b:44:11:d9:6b:2a:0d:51:
                    ef:9a:1b:b0:6b:56:34:84:b0:36:0d:a9:8b:1d:9b:
                    88:3a:30:0e:e2:ed:77:d9:61:6b:d9:d5:ce:9c:5b:
                    79:22:70:ec:48:de:88:ef:e2:88:9f:15:1c:e4:96:
                    b2:30:bb:2d:09:35:ef:7a:f2:e2:5d:30:71:90:ab:
                    7a:62:88:bd:25:a0:4b:4b:4a:ae:71:f2:b0:d2:f3:
                    77:ac:23:68:21:b2:9e:a9:07:99:44:97:0c:24:cc:
                    2e:27:4a:52:39:d9:d2:68:38:65:0d:fe:21:bc:e3:
                    e5:b7:98:7d:75:13:69:76:5f:b6:ca:bf:65:e4:43:
                    d8:b0:c9:88:ae:26:61:23:4e:66:ff:1d:cf:a8:ed:
                    12:7c:c9:45:6c:b6:ae:9a:66:f3:b7:7a:5d:3c:bf:
                    c6:e2:e3:64:b7:1f:90:0c:31:94:3b:90:b5:97:d4:
                    ef:60:71:13:38:f0:52:94:9d:91:6d:4b:e6:f5:40:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FD:F7:17:DD:76:2B:54:9B:14:B5:AD:72:1F:D8:60:83:67:BD:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:0e:48:f0:fa:08:b2:44:fe:bb:f6:ab:05:dd:c5:ea:80:
         a6:37:6e:c1:03:bb:85:17:de:5c:7a:cc:ad:cd:6d:41:ab:54:
         4e:35:b3:79:ab:ce:2a:fc:9b:b3:cc:ba:8f:0b:02:7b:d4:0e:
         1c:08:3d:93:b6:f3:06:e3:8d:1f:de:21:09:d5:72:cd:bb:e4:
         21:b3:56:e8:fe:7a:b6:cb:27:5c:44:c0:7c:8f:ce:fa:88:05:
         9a:4b:d4:ac:47:6c:1c:9b:d3:4e:72:40:b2:db:78:8d:36:f7:
         31:d9:64:d1:d2:84:81:0e:5a:0e:0d:22:f1:43:d8:b2:a0:5b:
         eb:08:03:7b:6a:e2:31:70:67:b0:12:0a:d0:95:59:8b:9a:75:
         d7:e6:ce:7b:5e:fe:3e:20:8f:9b:03:82:e5:79:c6:58:51:d4:
         c1:01:e8:1b:e3:17:9d:dd:c1:04:65:ca:b5:fd:d2:7a:cf:10:
         a8:db:cb:08:6d:10:1c:70:8a:97:78:93:7a:d9:dc:dd:be:2e:
         3d:f5:df:61:b7:d6:85:a8:0f:54:06:00:91:0c:a7:22:f1:d8:
         fd:85:5f:1c:33:05:30:61:7b:94:67:53:13:6f:58:55:72:ca:
         a8:e9:8e:f2:36:09:09:24:82:58:a8:f3:ec:ef:85:b6:57:96:
         e8:0d:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:36 2025 by rpki-client