Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
File:                     546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa (raw, json)
Hash identifier:          5HUmg0L2eTTrJQW/1lQLZKKWTxqYAkFr3I9Gznnvvcc=
Subject key identifier:   39:E7:E6:A0:B6:E5:3B:7A:72:93:92:65:38:30:2C:7A:9E:BB:8A:8E
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584A5E60645D4D74AD0C45661400
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     394453
IP address blocks:        198.212.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:64:5d:4d:74:ad:0c:45:66:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=de2d5cb6-b723-4f0e-be65-2d0f59e572a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:30:d6:6f:37:67:1a:86:30:f8:66:f3:29:
                    df:ed:b5:62:ce:76:b3:43:d0:1f:9b:da:c0:80:c6:
                    1f:10:92:97:70:05:8d:92:84:82:f9:17:e4:17:3f:
                    2e:25:41:3c:25:6a:66:92:8f:d6:b8:c8:8e:17:c9:
                    e2:38:7e:e9:cb:ac:0e:c3:7f:a1:2d:3a:60:74:3f:
                    87:2a:c3:1f:c1:0c:6b:64:26:f4:b4:d8:47:e6:19:
                    09:84:be:b2:c3:b6:3b:7e:7d:67:16:df:dd:9d:05:
                    93:b3:cf:53:fc:2c:25:01:9b:58:11:2e:5d:5f:22:
                    e4:36:b2:9d:80:a8:89:89:40:fc:c2:75:44:eb:15:
                    28:59:67:c7:ab:4c:f2:7d:9a:55:54:25:6a:08:2f:
                    df:85:18:8f:e4:29:1b:a1:f9:3b:47:a1:40:32:94:
                    d1:62:41:92:af:9c:77:f4:8c:3f:5a:86:9b:43:f5:
                    67:f7:c8:0c:40:a4:5e:60:53:24:04:b3:ca:e7:45:
                    3f:bf:3d:29:74:d1:8b:c5:57:7e:48:1b:8f:41:93:
                    53:fd:db:7f:92:9a:a1:e2:18:ea:04:09:56:69:e8:
                    6f:ca:ec:8b:ce:e1:e6:61:b6:12:9a:06:07:af:2e:
                    56:cb:bd:41:6e:5c:47:9e:0d:5f:a5:ac:d1:15:62:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:E6:A0:B6:E5:3B:7A:72:93:92:65:38:30:2C:7A:9E:BB:8A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:88:39:d1:ff:75:2c:0e:56:27:c4:bf:b2:9d:87:1f:19:
         9f:e4:c3:e2:bc:c8:74:3f:54:70:b9:70:ce:52:43:5f:b7:46:
         be:5b:ee:e5:26:44:16:61:bb:c8:15:53:a3:c9:48:7b:14:8a:
         7e:1a:71:36:a8:ab:45:88:b8:76:03:fa:c3:70:f2:4b:e7:62:
         25:c5:73:ec:74:45:a9:30:63:d8:27:a1:89:11:7d:40:5b:28:
         fe:04:6e:51:d3:b8:ab:49:1f:4d:3b:48:87:08:09:8c:ed:e4:
         cb:e5:46:a4:d6:e6:16:49:53:fc:14:33:43:ee:7a:88:94:37:
         d2:a2:e7:d8:e3:b6:d3:2a:42:01:a6:bd:fe:9a:3e:b4:63:5d:
         67:61:fb:06:07:7f:74:b5:cd:1c:3a:85:d5:cb:1c:82:3a:ee:
         4e:97:b8:f8:ec:37:5b:c6:1c:ea:06:e4:e3:ea:78:5b:9c:7a:
         ae:19:44:27:65:d3:a7:ad:b0:51:1f:8d:73:a5:8e:43:5c:e0:
         67:f7:10:a0:de:d2:d0:22:9b:a4:08:9e:c4:07:47:67:00:b2:
         ac:47:f6:2e:31:c0:4f:01:bd:2c:1a:bc:8b:ef:2f:ed:4c:c6:
         aa:54:ea:b8:63:7a:ea:48:b4:9e:e7:49:72:ca:b5:06:7b:db:
         99:8a:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:01:41 2025 by rpki-client