Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa
File:                     e0931627-c998-367b-977e-2116409a07e9.roa (raw, json)
Hash identifier:          q+5D0yrvg6OkQj6V2t872wZimuT5Y4Njp30lhvC2a+Y=
Subject key identifier:   56:A5:3B:D2:D0:CB:92:FE:16:C3:06:01:D6:65:47:1A:31:A1:9D:26
Certificate issuer:       /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial:       010D0C9F4328584A90A0C34C98439B23099DB900
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     46133
IP address blocks:        2.57.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c3:4c:98:43:9b:23:09:9d:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=3e61c30e-4b6e-4239-b4b1-690c71b19c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:5c:05:d9:53:a3:f2:7c:d8:a6:f7:0b:b1:
                    68:6a:18:b0:3a:e3:98:fa:b3:20:cf:e3:37:b6:9b:
                    e4:f8:de:31:f0:04:0a:f9:a8:af:a9:ff:04:5d:0a:
                    40:10:56:83:5b:07:24:4f:52:31:6f:bc:75:a2:ad:
                    e5:0c:cd:e6:b2:84:60:b3:c3:aa:59:f0:fc:52:13:
                    4c:46:11:be:9f:07:3e:00:e4:c0:ef:f0:f6:03:cc:
                    a0:9d:7d:f8:1e:54:28:f5:db:29:0d:50:f3:d4:10:
                    7f:57:33:53:e6:d2:ff:13:54:ed:92:8b:3e:28:81:
                    12:77:08:8f:32:36:38:42:9a:66:89:cd:08:a9:68:
                    56:cb:a4:0d:28:a6:97:f3:5e:12:64:cd:ed:46:4e:
                    e3:c6:97:46:10:22:10:53:c6:f9:d4:c7:3f:d0:25:
                    fd:87:b2:2e:94:d3:84:f2:4b:dc:65:7d:2c:50:aa:
                    28:4d:b9:78:3e:d4:c6:cf:f2:61:21:85:d4:fb:e6:
                    d9:50:2e:c1:0d:af:21:16:55:b3:39:b4:8a:9e:05:
                    79:57:0f:b8:c0:46:ca:5c:d8:74:47:4c:4a:ac:d7:
                    7b:dd:64:1e:d4:8c:63:4d:1d:83:de:38:2d:59:12:
                    c8:15:aa:64:5a:48:58:ed:35:ee:79:08:2c:7b:68:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A5:3B:D2:D0:CB:92:FE:16:C3:06:01:D6:65:47:1A:31:A1:9D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:0b:d5:78:b4:b7:48:e5:ae:9a:d5:84:d3:86:dd:b0:5c:18:
         52:b3:eb:41:93:72:52:91:fe:0d:2d:ee:7c:65:c0:76:ca:d0:
         79:a3:33:9d:b9:f8:ac:97:b7:d9:8e:ae:16:8f:c2:a8:cc:83:
         b4:08:3f:6f:70:d6:42:cd:9b:07:17:09:26:71:72:19:d3:40:
         62:ee:f3:bf:00:0c:2b:ee:27:51:75:c4:47:6d:17:a4:32:12:
         e7:63:9b:ae:df:04:6c:9f:2a:eb:7d:34:0e:a1:44:c5:d2:c8:
         7f:0a:47:1c:ae:77:a3:d6:13:08:66:5b:40:e2:b5:e9:07:1c:
         f3:51:0f:d6:52:04:34:a8:c0:19:f4:ab:d3:a4:19:f9:31:4f:
         b2:79:64:27:db:99:43:48:05:4c:31:6a:68:00:cf:40:39:2e:
         7f:50:e4:57:28:b4:e8:98:a0:e9:02:ab:35:12:3f:70:3b:5a:
         5d:72:8f:2a:2f:8d:79:a3:58:52:3c:d2:45:b3:c1:33:b0:dc:
         62:cb:ea:26:a5:f5:50:fd:55:4b:0c:02:69:1f:ca:a2:39:de:
         4d:80:73:91:4d:5c:c9:45:c6:f0:da:0d:89:6b:2b:d4:9e:34:
         ab:9a:0d:01:04:17:d6:4e:12:2d:be:b5:19:94:8e:63:8d:45:
         1e:b4:08:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:19:14 2025 by rpki-client