Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0c7a4b05-7889-30c5-9fed-691cf558c26c.roa
File:                     0c7a4b05-7889-30c5-9fed-691cf558c26c.roa (raw, json)
Hash identifier:          ODlBxH0crcSdRIZG1bYKLoImEv+fmGMbg/dHxxkpO9E=
Subject key identifier:   11:16:19:40:B8:DA:89:80:59:D4:06:E8:60:C8:43:6B:AE:EB:26:3F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB650EDD922907BDF723DE200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0c7a4b05-7889-30c5-9fed-691cf558c26c.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     53533
IP address blocks:        216.200.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ed:d9:22:90:7b:df:72:3d:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=2cc53f93-244e-4601-8930-2be3dbff64dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:ed:13:31:15:45:bf:43:d0:78:23:ac:81:
                    e8:63:ef:d2:a3:4a:5a:86:96:0c:06:82:4f:59:c3:
                    11:f0:16:7c:5b:21:71:4c:eb:17:67:6a:85:40:b7:
                    6a:c5:39:cc:f4:6f:3b:91:db:30:fd:b8:3a:c4:00:
                    e5:00:92:b6:fa:d2:69:e2:33:ab:b4:87:91:50:d5:
                    bf:67:08:1d:08:15:07:0a:88:d2:fa:fb:8a:f7:2b:
                    5c:c3:d3:39:fa:82:86:b4:7e:58:e4:fa:ba:71:07:
                    b1:7f:8b:48:6d:01:63:fa:a6:0b:74:af:8c:94:fc:
                    b1:07:d3:39:41:cb:29:0c:c2:39:a5:07:50:fc:4a:
                    83:70:a7:f6:de:8f:6e:ca:ce:ec:b1:72:47:b7:ef:
                    0d:f2:49:ed:5b:6d:53:60:69:81:af:9b:35:50:17:
                    23:a1:74:f7:c9:33:ff:e7:c8:8b:11:bd:7a:b2:35:
                    42:7a:2c:3b:8a:90:9a:40:2e:d3:eb:54:6b:a2:cc:
                    cd:e1:90:62:4d:7e:c7:22:e2:d1:28:30:44:0d:9e:
                    2c:59:78:e7:f5:6a:16:04:bc:f5:64:59:b1:60:7b:
                    c7:57:fa:79:2c:06:93:35:62:c5:3d:d5:a8:1e:bc:
                    bd:73:52:8e:67:4b:d3:23:1a:14:fc:ff:30:07:a9:
                    e1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:19:40:B8:DA:89:80:59:D4:06:E8:60:C8:43:6B:AE:EB:26:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0c7a4b05-7889-30c5-9fed-691cf558c26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:d0:f5:da:11:d7:ce:46:ba:a4:c2:41:3f:83:d5:06:c4:
         df:c6:cd:b4:e4:90:c7:d7:43:60:82:ed:bd:cb:09:ae:93:7c:
         bc:d9:b7:4b:bb:64:5b:79:75:af:fa:75:de:d0:0f:d8:ec:c0:
         71:82:7b:5d:a7:42:f5:c8:4e:93:09:2b:15:fe:35:5f:db:17:
         26:1e:6e:63:94:fe:5e:de:a9:4e:f2:6e:a8:7a:b3:f3:68:f9:
         20:ef:e7:e2:7e:9c:2d:83:35:d9:4d:9b:08:b1:e8:96:55:01:
         5b:68:b4:1b:6d:ff:96:a4:2b:de:9d:e3:ae:dc:c5:c2:22:81:
         3b:ee:44:23:80:1f:3d:ee:d1:2a:63:07:17:27:8b:5f:75:c5:
         17:af:91:64:5d:7e:90:20:e4:ab:e4:5a:fc:4f:1f:51:41:6a:
         f5:e6:45:29:04:24:67:c8:ad:d4:10:5b:1c:c4:bf:ef:ee:3a:
         af:e5:eb:40:fb:08:54:47:51:57:a2:74:e5:f8:cb:9f:6e:19:
         d1:20:d1:3a:6b:4f:b2:b5:a0:22:4e:b7:30:11:c9:f5:27:c6:
         21:83:32:f0:ae:5d:f5:65:0f:e8:97:cf:55:02:3d:03:9a:85:
         28:c4:f6:aa:b4:59:3a:33:b0:67:3e:f3:79:e8:1f:d2:65:76:
         dc:35:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:28 2025 by rpki-client