Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ea53d45-2d93-35bf-9609-52d9decf2334.roa
File:                     1ea53d45-2d93-35bf-9609-52d9decf2334.roa (raw, json)
Hash identifier:          MFQWU+HYlH/qolrLXyzLKkrEwwU6j/vzzLd7CZiqHuU=
Subject key identifier:   D0:96:2A:09:FD:81:5F:A6:2C:03:1D:AF:5E:CB:AD:A9:A4:FF:07:2D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AA2C6455AAB3EB8EB9819D1E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ea53d45-2d93-35bf-9609-52d9decf2334.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     16276
IP address blocks:        206.123.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:45:5a:ab:3e:b8:eb:98:19:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=fe16359e-b1f2-4eb5-b993-373422080819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:30:29:36:95:d0:fc:60:26:43:20:f3:18:c6:
                    16:c9:48:b8:78:d5:8e:80:9b:34:e3:fc:15:8f:bc:
                    7d:ce:45:b2:81:8c:99:4c:f5:81:36:29:5f:d8:46:
                    b5:74:b5:cd:92:23:61:6f:ec:df:90:44:d3:6a:72:
                    fc:b0:79:85:14:c6:d5:64:b4:cf:2d:d3:77:f5:4d:
                    f3:2b:ab:f9:42:3c:64:fc:21:b8:64:65:a8:f7:23:
                    63:0b:e0:37:7d:5b:79:09:b5:18:8a:b1:bf:e5:7f:
                    8b:50:ba:2a:29:4c:f6:55:11:f1:fc:2f:d3:61:24:
                    40:a1:4c:ad:91:eb:c7:f6:69:30:d2:81:eb:c0:d3:
                    e6:81:c2:e4:b5:70:16:97:12:d2:01:bc:84:b7:c8:
                    10:36:7a:d0:e5:1b:c4:29:a6:58:3a:6e:67:5a:11:
                    1c:d4:09:cf:f7:20:d7:76:9b:93:12:64:56:f5:02:
                    19:3b:69:92:b5:fc:5d:8e:72:ac:7f:7b:be:9d:45:
                    ee:77:eb:4a:75:db:c2:ee:3e:39:e1:8c:ac:e4:26:
                    7b:90:0c:7d:8b:6e:40:20:af:6e:9b:00:20:37:11:
                    32:f3:41:b2:99:98:6b:eb:d3:a8:4b:9b:58:43:37:
                    3c:0a:bf:47:b8:21:af:49:32:1b:59:89:99:33:38:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:2A:09:FD:81:5F:A6:2C:03:1D:AF:5E:CB:AD:A9:A4:FF:07:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ea53d45-2d93-35bf-9609-52d9decf2334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:42:5a:9d:ab:bc:f3:ef:dc:98:78:8e:12:49:8c:75:cd:
         fb:2a:78:91:e3:4c:14:af:b8:89:64:58:5c:e2:60:43:66:ca:
         71:c9:98:35:95:3f:3c:8a:aa:8a:9f:0d:ea:66:e6:41:8b:52:
         02:dc:da:3d:34:ef:7d:1b:65:ec:26:de:b0:34:15:1c:15:42:
         b1:e9:b6:f3:0f:5a:7d:44:53:94:22:e8:80:5b:01:1d:fb:e1:
         d0:4e:5d:e7:36:de:c0:98:84:35:13:01:3e:6a:5f:6b:2e:e4:
         e6:e3:b8:bc:54:ee:c6:d5:33:f8:11:34:98:9f:dc:fc:47:ae:
         e9:80:47:66:5a:fb:d9:d2:9a:ae:0b:df:bd:05:48:03:ec:e6:
         a0:b6:2f:e1:34:21:a6:57:b6:c6:a2:13:fa:36:7c:69:de:a7:
         77:29:ad:1c:b4:ed:9e:6e:f2:77:63:9d:a5:25:3d:24:2a:ee:
         ba:fd:32:67:68:16:56:77:ed:8a:a4:92:f6:07:7d:4e:c1:85:
         80:6a:42:5d:68:7a:47:69:65:58:cd:1a:f1:3e:8a:d4:8a:50:
         e6:e6:40:3b:02:4a:11:5b:f1:47:7b:87:32:51:f1:90:9b:7a:
         d1:91:c8:f4:a6:bd:7d:50:8b:af:67:78:e7:6e:3e:e9:a0:cf:
         37:64:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:28 2025 by rpki-client