Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa
File:                     5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa (raw, json)
Hash identifier:          BclhCGFjhH5zLE/FPkWtc62M5Z1jR+nfujOLvBEFmbI=
Subject key identifier:   B3:AD:64:66:11:D6:20:2B:9B:5C:97:D4:84:1D:FC:0C:29:C2:E4:92
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BAC05DC7533EB4B9E81C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     63442
IP address blocks:        207.126.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ac:05:dc:75:33:eb:4b:9e:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=62e2d9dc-95ec-4643-b83f-98fdeb63bbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:53:c6:0f:d0:25:df:f5:a5:2e:73:1d:53:
                    24:6e:d7:91:fc:a6:aa:8c:f9:c1:2e:19:a2:7e:36:
                    1f:e3:24:eb:70:8e:c7:5c:0d:46:dc:c8:9e:7a:00:
                    9b:c3:23:38:65:e9:b4:2e:77:9e:d4:fc:4a:87:37:
                    a4:5d:9f:bf:69:d1:0d:60:47:32:b7:e1:70:26:3c:
                    26:8e:b2:c9:cc:ed:30:40:fd:b6:31:8e:31:98:4e:
                    20:6a:49:f6:9e:bf:54:8b:ce:2b:c4:c9:56:66:ff:
                    95:08:5a:3f:90:00:f0:44:a0:a9:32:b6:fd:52:67:
                    ed:46:86:41:73:74:d3:f8:b3:73:c4:ae:a7:32:a3:
                    9c:e8:26:ac:7e:41:86:04:9d:52:61:ca:b4:58:42:
                    61:54:60:d0:f5:40:e3:06:5c:2e:a0:96:d6:84:10:
                    72:ce:51:d1:51:70:3a:5a:ed:fc:fc:c7:d2:b9:c6:
                    5b:e4:08:27:d3:5d:d8:44:fa:0e:52:a7:73:ac:d8:
                    82:d1:8b:4e:c5:06:eb:d5:fa:c0:71:bc:b6:1e:e7:
                    55:25:9d:f2:8b:ce:02:72:15:1e:17:09:15:17:dc:
                    aa:b0:54:65:fa:8d:81:f6:84:d2:a9:8d:99:4e:a6:
                    4f:1b:9a:25:a7:14:30:1e:a7:6e:e5:9f:02:d2:75:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:64:66:11:D6:20:2B:9B:5C:97:D4:84:1D:FC:0C:29:C2:E4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:03:f6:8c:bf:b4:53:e8:ac:a8:1a:9e:89:86:b7:d3:62:1d:
         70:1b:24:ac:72:c2:1d:8c:17:33:2b:b0:aa:3c:ce:cd:75:58:
         fc:36:66:8f:4a:d0:1a:e2:04:b4:77:29:d7:0a:ee:ad:66:4d:
         ab:7f:1f:b7:bf:b9:77:98:0e:7f:c8:d1:92:1e:d9:6a:d0:cf:
         51:f7:4c:b2:6f:4c:f5:79:b8:9a:38:d3:a0:0f:4a:3c:dd:c0:
         b5:cb:62:72:45:d3:99:f5:6c:55:4b:8e:bf:49:2f:f6:07:8a:
         18:5c:5e:06:6d:f2:50:5e:cf:fa:a3:80:1c:bd:4e:9f:4a:d1:
         7c:03:cd:89:e0:d2:b7:7c:8f:a2:f7:c8:89:0b:0b:39:76:61:
         9c:8c:c5:08:46:ef:d2:0c:e3:d2:e0:87:31:44:6f:99:5f:06:
         a1:1d:c8:95:c9:7c:36:b5:a4:dd:72:0e:34:4e:93:d7:8e:e5:
         1b:c3:72:fe:13:a4:78:17:20:f7:89:65:49:4f:ce:28:ef:a6:
         85:e9:76:e2:a6:ff:61:ed:ba:07:a9:42:7d:57:69:02:0e:93:
         3e:1b:04:f1:5f:80:fd:b9:aa:78:74:7f:b1:6b:8c:e3:93:a7:
         c1:ac:72:0d:7d:19:af:18:f3:f2:79:c9:e0:3c:cd:34:74:73:
         8e:87:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:28 2025 by rpki-client