Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa
File:                     58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa (raw, json)
Hash identifier:          EMvkjjECj5mHvPOBf3uvKCWKNAy6etfpMyjzLLuVGhw=
Subject key identifier:   5F:C6:CC:5E:49:48:93:F0:AA:DA:04:C7:55:17:98:77:50:C6:57:35
Certificate issuer:       /CN=9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2
Certificate serial:       010D0C9F4328584A03A5564CC987D932A6A37D00
Authority key identifier: 4A:38:38:DF:52:41:07:15:90:3F:23:02:23:C6:22:6A:B6:9D:AF:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     31844
IP address blocks:        97.107.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:56:4c:c9:87:d9:32:a6:a3:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=509f1364-a66f-4901-83e9-09bf3fd395ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ac:89:bf:a0:20:fa:f2:51:31:8c:2e:62:f4:
                    7c:6d:28:56:8e:72:d7:d1:e4:dd:a1:13:cc:53:dd:
                    55:f9:51:b9:2e:95:a3:ef:ff:95:2b:15:b6:81:ab:
                    28:ad:18:95:8b:36:cd:1d:33:c1:c3:ed:de:1d:cd:
                    71:0c:bc:6f:65:e9:f4:b7:22:86:c8:04:b6:5e:cc:
                    2d:bf:85:ad:a3:05:57:03:69:35:e5:d9:76:e5:da:
                    21:f2:2e:52:a6:0f:18:44:d9:8d:fd:94:a2:2a:1c:
                    fb:0e:5a:cc:cc:01:70:9d:38:b8:be:8d:e1:70:1c:
                    1b:ef:c2:61:b9:5f:5b:96:34:48:17:f0:f1:9d:2f:
                    19:c1:1e:11:19:f9:6e:d7:34:52:60:04:ef:96:4c:
                    97:40:a8:21:5b:a3:19:e1:d9:d9:85:6c:a0:bf:af:
                    ac:41:da:38:47:66:ce:91:56:58:88:ec:9d:81:d0:
                    ce:77:ad:d8:df:cf:bd:2f:f1:f5:36:de:f1:2d:3d:
                    38:56:1e:76:74:5d:75:12:30:20:7a:b5:a9:b7:8d:
                    86:36:ca:9f:93:b1:0a:1b:25:4c:ac:1c:7c:f8:5d:
                    b1:12:b6:1e:f1:3e:79:f5:a9:0d:9f:3a:40:65:52:
                    56:86:42:c7:16:19:df:51:44:2b:b7:3a:9f:a6:76:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C6:CC:5E:49:48:93:F0:AA:DA:04:C7:55:17:98:77:50:C6:57:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.crl

            X509v3 Authority Key Identifier:
                keyid:4A:38:38:DF:52:41:07:15:90:3F:23:02:23:C6:22:6A:B6:9D:AF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:11:e4:67:2c:1c:94:99:a0:11:d5:31:07:98:23:ea:d6:c3:
         b2:75:81:91:d8:f5:3d:5f:8e:8c:e7:e6:12:8e:91:b8:d2:83:
         65:07:67:11:2a:63:2c:8c:26:84:33:65:dc:39:62:e9:30:d1:
         d9:6f:6b:9a:bf:a1:49:77:75:93:ac:30:13:88:9a:e9:94:3d:
         07:21:9f:41:c9:17:f6:1e:cf:ef:82:93:8a:62:df:17:9a:35:
         3d:0a:cc:2d:fa:41:58:12:a1:1c:ce:df:e5:32:e5:6e:ac:54:
         60:5b:24:96:67:2e:fa:ea:ef:7a:50:46:2d:15:6c:57:78:e2:
         66:ba:30:d9:20:65:b9:b1:3c:a6:8c:a7:60:72:98:c3:65:9a:
         7f:f4:51:22:6c:ef:b1:f2:89:c8:12:90:80:02:03:87:bc:38:
         6a:43:c3:a4:8e:91:b6:a2:b1:73:7b:05:81:2e:52:72:06:48:
         55:cf:6d:4e:d2:77:b1:bf:86:06:66:b1:76:8b:2f:08:63:0a:
         7f:b3:51:a7:56:44:6a:2a:f8:00:23:de:6a:d6:6b:6d:3c:60:
         57:f5:da:a4:4d:ae:b3:e2:4e:f1:74:15:46:e3:de:48:1c:e1:
         3a:12:a4:70:6f:2f:5a:33:b4:a8:4f:84:bc:cb:ad:4f:dc:d0:
         2d:cf:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:38:29 2025 by rpki-client