Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
File:                     149f19f9-ddf2-32e1-9d07-a184289910a5.roa (raw, json)
Hash identifier:          OOeGj05sceQDOGQbK6LBr/6NkZxguwWB8IogG7vAE1E=
Subject key identifier:   35:76:25:15:5A:50:21:38:15:A7:1B:C1:A1:18:A5:C2:C7:50:81:C3
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A9900C11A0C69D839C0F35200
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     397422
IP address blocks:        209.237.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c1:1a:0c:69:d8:39:c0:f3:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=f5a77b9f-1235-4fa9-9da6-ffc69a269b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:89:81:0c:9f:2b:81:79:fc:1c:1f:ed:39:
                    00:47:e5:3f:f5:3e:ee:84:20:3b:dc:1e:84:3e:39:
                    ff:9f:66:fe:6b:65:73:7a:e0:40:9f:43:57:4f:53:
                    18:e8:ae:cd:c1:72:11:53:b8:70:dc:63:85:37:d5:
                    91:27:28:5a:04:26:70:1c:6e:7e:24:35:85:d3:6e:
                    3d:d7:35:ba:3f:84:3d:61:23:bc:86:ee:ca:1d:2d:
                    3f:dc:f5:62:9b:4a:2e:c7:83:84:87:21:fb:0b:fd:
                    bd:1d:6a:24:22:69:03:e9:14:d9:e1:9a:82:98:1a:
                    05:a0:e7:88:5c:ba:50:76:80:3b:73:5e:0f:b6:ee:
                    26:e4:ee:67:c4:3c:1f:5d:c8:0a:ab:cd:16:2a:3a:
                    14:4a:b1:c9:8a:99:b2:dc:bd:56:c3:e8:70:72:6d:
                    d2:75:ac:97:78:7e:54:6b:03:5c:9d:d7:ef:45:29:
                    3b:2a:8e:79:22:ca:89:5d:63:33:08:df:6a:0f:42:
                    1d:d6:fb:83:fc:d8:95:2f:c6:46:38:f9:9f:4c:b0:
                    cf:56:97:43:c2:3e:82:1e:34:9b:41:f0:68:07:b8:
                    32:12:38:3c:69:80:86:8c:7c:dd:90:74:17:22:48:
                    85:14:9e:0a:2e:9d:86:5d:0a:f8:93:02:62:a8:a8:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:76:25:15:5A:50:21:38:15:A7:1B:C1:A1:18:A5:C2:C7:50:81:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:34:2b:fb:e1:5f:bb:a0:87:8e:89:24:a7:da:3b:a6:47:
         96:a0:b2:14:3c:85:d7:4f:08:53:9c:6a:62:95:b0:0c:82:2b:
         ec:0d:6d:78:90:92:b6:c5:2e:0e:70:66:26:94:eb:d2:9b:02:
         ca:b4:5e:08:83:a6:a5:e4:75:25:1f:e5:90:c1:6e:c4:b8:db:
         e6:ba:92:07:53:80:26:43:51:d2:51:e5:fd:e0:4f:86:da:36:
         27:85:3a:8d:76:41:8d:09:12:d4:0f:23:cc:cf:12:7b:84:24:
         4e:86:ff:31:98:62:e9:b3:58:a8:39:61:59:e3:e0:6b:77:a2:
         47:9f:2c:43:52:84:d4:92:06:59:31:b5:85:c6:ca:fa:50:81:
         c6:de:40:86:fb:7f:85:4d:40:e8:b0:15:d7:b6:e8:aa:3b:c1:
         54:d8:a9:de:e6:fd:cf:de:00:84:ab:ff:99:4e:c6:b2:47:b7:
         4c:a4:89:38:57:4d:d0:96:be:e3:3a:56:99:b9:83:ab:95:4c:
         32:6b:f0:c2:9b:4b:00:08:8f:10:a0:e9:e5:a9:f3:3e:30:9b:
         cf:1e:57:2c:d2:85:76:04:c8:03:b4:c1:9d:2d:3f:5a:d7:25:
         44:7d:99:b1:6d:da:d7:13:0a:a0:ac:5b:67:63:85:0d:f5:5a:
         52:c4:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:45:09 2025 by rpki-client