Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24641704-cbd7-37d6-a51c-82756ccdf81b.roa
File:                     24641704-cbd7-37d6-a51c-82756ccdf81b.roa (raw, json)
Hash identifier:          YYB6VA8MdiRPFq9CpgXQOfl7V+wS2XdecWCCAUNVnN4=
Subject key identifier:   32:CD:E8:60:1F:61:D7:3F:1D:63:78:FF:77:85:AB:02:56:CA:81:E3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF73D2B4F65D09DE42000
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24641704-cbd7-37d6-a51c-82756ccdf81b.roa
Signing time:             Mon 16 Jun 2025 16:03:18 +0000
ROA not before:           Mon 16 Jun 2025 16:03:18 +0000
ROA not after:            Sun 14 Sep 2025 16:03:18 +0000
asID:                     81
IP address blocks:        192.154.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f7:3d:2b:4f:65:d0:9d:e4:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:18 2025 GMT
            Not After : Sep 14 16:03:18 2025 GMT
        Subject: CN=d46c5938-333f-4008-9062-31b82ab6f247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:57:70:ec:13:23:52:28:43:82:54:f9:c3:
                    74:1b:7c:ec:ab:c8:4b:e6:2d:f1:74:b5:17:dc:a1:
                    f1:7b:eb:27:64:80:db:32:af:20:75:cd:37:33:55:
                    3a:73:ca:ff:02:84:a0:43:8e:6d:c2:fc:dd:b6:fe:
                    32:a5:d5:78:93:15:2f:b7:6b:d6:54:5e:d6:1d:35:
                    25:52:24:d5:12:08:8f:7f:80:b6:4f:43:01:fe:c4:
                    b2:78:d1:98:db:ff:ab:42:a0:39:3f:78:40:63:db:
                    cb:d9:10:58:66:b7:dc:94:d0:6b:ac:39:18:da:5a:
                    d8:f9:ff:13:99:72:0c:ea:ec:cd:00:d9:8c:43:8c:
                    29:44:8c:e8:a9:7e:d1:34:a8:a1:e8:f7:ba:bd:d4:
                    a7:3a:d4:6a:85:e2:b2:1f:35:bb:1e:6b:a0:49:e6:
                    0e:d5:c3:81:d2:38:25:5b:0c:22:46:39:c1:f3:e3:
                    30:01:3c:ac:00:b2:24:e0:aa:f9:e2:0d:dd:78:74:
                    1c:56:a0:08:cb:62:07:fc:d7:ba:26:a3:91:c6:2e:
                    37:90:ce:35:29:d3:8b:17:f5:04:2e:0a:0a:e9:5e:
                    99:30:61:97:e0:6f:8e:71:54:4f:5d:58:19:3c:41:
                    6f:4b:98:9d:0a:ff:b5:69:a1:39:4b:d1:14:33:e0:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CD:E8:60:1F:61:D7:3F:1D:63:78:FF:77:85:AB:02:56:CA:81:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24641704-cbd7-37d6-a51c-82756ccdf81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e5:0e:14:99:81:0b:90:dc:23:c1:1c:77:16:83:8a:0f:8f:
         1d:64:bd:61:82:3d:b4:d1:f5:e5:1a:92:4a:ed:a8:f7:73:fa:
         ca:5e:3d:43:0b:b1:eb:9c:51:ea:08:51:97:97:87:47:28:b3:
         b1:76:c4:ba:94:00:54:d6:7d:26:4d:f8:07:dc:cf:0d:dc:05:
         97:fe:f8:99:9d:b4:fb:3c:77:cd:b1:ab:11:b9:77:20:cd:e1:
         2d:34:16:2a:12:89:37:b8:f1:df:60:84:26:a9:27:eb:47:e6:
         39:05:e1:e1:26:57:64:79:fe:13:7b:9f:09:14:be:cb:38:e4:
         0f:73:44:ac:2a:9c:ec:80:1d:be:d1:42:75:42:0f:e3:1f:a9:
         34:ee:64:c5:32:10:05:4f:f5:5d:ae:78:4a:52:56:90:11:36:
         00:f0:55:b2:4a:ca:0d:35:ca:45:39:2c:8f:ed:6e:25:49:3f:
         f0:72:96:14:b4:2c:c0:1b:ed:62:c4:86:87:58:42:20:cf:34:
         55:1a:7f:9e:ea:9d:6f:06:e7:55:68:93:be:37:65:e2:10:c4:
         d3:81:a9:0d:58:02:07:fd:94:51:e4:e7:22:0e:fe:58:8b:d6:
         59:c4:ce:9b:c4:f4:8b:a7:38:ca:33:d9:eb:f5:cb:01:25:dd:
         fc:93:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:15:58 2025 by rpki-client