Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9305f154-5dfa-3f7d-9be8-843f892701fe.roa
File:                     9305f154-5dfa-3f7d-9be8-843f892701fe.roa (raw, json)
Hash identifier:          focApRDMzu1U1UOKOZZKCuVtcTFCfd6t89A/GtwDPSI=
Subject key identifier:   2A:6C:A6:88:29:BE:DF:36:E3:66:27:3A:5F:2F:10:AD:59:37:A8:74
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C011D690D156CC50934E80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9305f154-5dfa-3f7d-9be8-843f892701fe.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        24.53.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:11:d6:90:d1:56:cc:50:93:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=f7ef8b6f-27e0-48b9-8310-4f5fd1da7063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:b8:fb:a3:61:a0:dc:a6:99:4d:5d:42:32:
                    63:06:3c:f1:1b:5c:fe:f2:97:ca:3d:7f:ba:42:9e:
                    56:cd:fe:4f:3e:d7:c1:c2:60:16:38:27:2e:ec:a7:
                    59:76:2c:41:93:db:f0:d1:38:8e:92:a3:e7:ba:10:
                    aa:ba:03:bd:1c:b7:a4:9d:d7:5b:57:a0:a2:b7:54:
                    ac:97:94:9c:29:a3:bf:11:af:5d:2d:a1:3b:e5:4a:
                    90:bd:cb:5a:a1:67:9f:92:70:cd:d3:55:5a:54:9b:
                    0b:90:a1:0f:6c:ad:de:b8:bb:59:3b:d3:d8:f7:2a:
                    e7:f1:55:ab:73:2d:a7:e1:05:d2:73:ca:d4:92:6b:
                    72:f6:64:1d:da:69:e2:5b:ba:37:a6:02:36:8e:67:
                    78:fe:d4:a1:64:eb:e2:a0:2c:ab:66:25:ff:a2:7b:
                    d3:92:17:68:e3:0a:c7:7a:ad:2a:de:77:c2:37:7a:
                    44:7b:9e:0a:f9:98:13:e3:ea:8e:96:5c:e4:75:95:
                    f5:71:8e:83:b2:5a:27:f3:82:4b:1d:1d:37:2e:fb:
                    9a:b9:4a:1d:e5:dd:ab:3a:af:12:a5:a9:96:3b:4c:
                    2b:ce:9f:f5:11:25:0a:ad:8b:b2:9f:b9:69:3e:2d:
                    12:6c:53:d6:d4:05:c5:84:95:38:b6:11:f3:73:05:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6C:A6:88:29:BE:DF:36:E3:66:27:3A:5F:2F:10:AD:59:37:A8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9305f154-5dfa-3f7d-9be8-843f892701fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:cc:1f:07:ae:e9:c3:64:0b:a8:c3:f7:86:b7:69:00:9d:
         d4:2d:48:92:e1:4f:63:ef:ad:ad:ff:ed:9b:6b:f0:e9:ba:22:
         21:fe:d8:d2:84:f4:30:0f:25:9f:84:6b:79:f7:89:90:48:14:
         71:3a:e5:45:3b:f7:f5:5f:60:56:45:fd:a2:0a:00:e9:ed:50:
         41:54:82:f6:f9:e5:e7:45:0e:e9:1a:20:57:d9:15:ef:a9:22:
         64:d0:a7:2d:31:d0:d8:07:87:da:b3:8e:94:ff:42:23:06:83:
         49:ed:08:4d:72:e4:77:e0:24:67:7f:3f:c4:f2:e8:01:d9:19:
         d6:39:88:89:01:e8:d9:b1:de:81:fe:25:fa:1f:77:47:4f:b3:
         c1:b7:75:e6:6d:58:3f:ca:08:1c:51:00:4f:fe:a7:d9:27:7a:
         69:be:f0:49:7c:dc:69:59:0d:26:0c:58:a0:cc:34:25:86:6f:
         91:88:99:c0:c3:b1:50:4f:4a:a4:1b:6b:e2:06:a3:1b:ab:e9:
         93:53:a2:77:a7:9f:4f:e4:46:ca:6a:c3:fb:f7:93:93:94:2c:
         82:73:f7:03:bd:9f:7d:83:5a:7d:91:24:e2:89:5c:6d:5e:56:
         66:eb:3c:9b:d8:f1:a0:2a:2e:f1:1c:92:e8:8d:2d:12:9d:de:
         c5:27:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:55 2025 by rpki-client