Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/bf990485-b2eb-31f6-acc9-353e7365504a.roa
File:                     bf990485-b2eb-31f6-acc9-353e7365504a.roa (raw, json)
Hash identifier:          hPmwBqciIqT9INyjMVZNFwFnwwq6WYILKPHRLfkM95c=
Subject key identifier:   5C:BF:3A:2D:EA:1C:6A:E4:82:7C:5A:F9:3D:C0:82:D3:A5:27:FA:2A
Certificate issuer:       /CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5
Certificate serial:       010D0C9F4328584AA0DDD080750FFD1EA5D03700
Authority key identifier: BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/bf990485-b2eb-31f6-acc9-353e7365504a.roa
Signing time:             Thu 24 Jul 2025 20:37:02 +0000
ROA not before:           Thu 24 Jul 2025 20:37:02 +0000
ROA not after:            Wed 22 Oct 2025 20:37:02 +0000
asID:                     16509
IP address blocks:        198.207.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a0:dd:d0:80:75:0f:fd:1e:a5:d0:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5
        Validity
            Not Before: Jul 24 20:37:02 2025 GMT
            Not After : Oct 22 20:37:02 2025 GMT
        Subject: CN=641cd269-3356-4c46-82fb-bca7273173e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:02:cd:7f:35:d8:87:61:4f:c1:d6:c3:44:
                    63:c2:17:2a:dd:b0:8b:53:ad:73:cc:8c:1c:e4:e6:
                    67:75:8c:7d:5d:29:40:9f:f3:ce:41:91:6a:89:e1:
                    1a:86:8d:fa:cd:98:8a:75:e9:76:f3:7f:43:78:30:
                    ce:e8:96:89:d0:68:24:78:d5:ba:83:80:2a:a0:67:
                    b0:16:f8:48:8a:1c:54:31:46:86:8f:8e:89:a8:86:
                    95:85:6b:83:85:a9:17:24:1b:83:d7:ce:34:f6:f8:
                    b8:c9:33:df:7c:15:a0:36:c6:98:f7:f6:16:e7:26:
                    3a:c1:fc:de:d9:2e:f2:9e:c3:eb:59:f4:ea:be:1a:
                    e3:9b:3d:57:b8:51:42:b1:a0:bb:64:b7:b3:6d:ba:
                    a2:b0:04:b3:84:82:57:20:db:07:d0:c7:a4:a8:fd:
                    5d:96:c1:01:ad:3c:04:be:2e:3d:fa:b6:b4:7c:90:
                    ac:2b:35:26:de:2c:34:ab:ab:53:9b:dc:76:21:1d:
                    98:ef:ea:20:9e:c3:b0:9f:6d:27:5d:f1:4a:e5:63:
                    00:fd:f6:b0:15:1c:5c:fe:35:50:fe:c5:22:75:83:
                    9e:b6:82:b0:5f:31:28:11:6e:46:71:4b:3b:52:50:
                    a2:ac:d4:b0:48:55:2c:40:c3:60:32:05:a7:ac:d6:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BF:3A:2D:EA:1C:6A:E4:82:7C:5A:F9:3D:C0:82:D3:A5:27:FA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/bf990485-b2eb-31f6-acc9-353e7365504a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:9e:69:50:de:22:a2:d0:04:ab:30:18:13:50:7b:6e:77:
         8a:e5:ed:02:6c:95:48:29:42:da:27:e2:ea:7c:6a:89:c9:d5:
         0e:5e:d3:44:cb:b6:43:e6:1f:66:c0:c0:1a:b3:6f:01:7c:30:
         b4:c1:25:b5:d4:d8:8c:20:84:ab:03:cc:51:06:ad:1b:27:75:
         ab:eb:d3:13:5e:63:60:38:37:18:3c:2f:57:09:3f:5e:f6:5e:
         7d:5d:a6:2a:dc:d9:8c:5d:02:36:50:ec:93:30:61:9b:41:2a:
         f8:90:10:d3:7b:4a:96:db:8d:f9:3b:b9:87:41:a3:68:df:17:
         06:7f:29:cb:b7:d2:85:d8:ab:3b:ac:1d:11:09:c5:95:21:65:
         3d:68:d8:2a:9d:a8:83:42:7d:43:63:b0:de:88:b4:c0:9b:a9:
         67:58:54:22:d3:0c:af:f8:59:b2:40:9c:c4:a3:fd:8a:24:4e:
         f0:4b:10:8e:04:23:18:85:d9:e9:f0:43:5a:d3:96:d7:2e:e3:
         05:df:96:43:92:26:cf:88:86:08:2d:a7:f1:f0:4e:72:90:39:
         70:1f:c9:37:4b:3b:82:68:44:98:79:82:5c:1f:5e:8a:7c:43:
         6d:b9:85:16:28:de:db:f0:d3:8c:4a:fa:ee:6d:29:44:d5:0c:
         82:25:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:14 2025 by rpki-client