Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
File:                     bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa (raw, json)
Hash identifier:          zN17bHTAhFH20BEKecyjcbAK5NYFKitX2u1zTZV/8b8=
Subject key identifier:   F6:E9:5C:00:95:3D:74:25:7B:A0:4D:BA:CE:2A:29:B9:EA:D8:74:04
Certificate issuer:       /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial:       010D0C9F4328584AB91BB412625AFCFB54A04E40
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        198.51.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b4:12:62:5a:fc:fb:54:a0:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9eb34531-d6e5-4b4b-aade-cd1037dd15e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:49:2b:91:a6:62:c8:91:c4:1c:6b:d5:cd:
                    fa:2c:e2:f8:44:bb:3e:25:aa:21:58:19:13:45:e7:
                    23:df:84:e5:b2:13:eb:0b:77:d4:a9:ae:eb:e1:1e:
                    81:81:73:6c:62:51:ef:7f:3e:2f:0e:d3:08:70:e0:
                    83:dc:f3:45:57:f3:b7:79:f5:f0:fe:a4:e1:2c:56:
                    8d:7e:29:d9:bb:b9:f7:04:21:fe:d8:09:92:f7:e0:
                    63:3b:17:df:e0:c6:06:da:8f:44:60:9d:94:09:16:
                    e3:af:b8:62:f3:52:6d:3a:81:8c:41:b6:ef:28:f2:
                    1c:58:73:56:4d:a1:fd:cc:56:90:51:18:67:af:1e:
                    36:7b:78:ae:d9:91:6e:ec:47:70:c0:38:43:bc:0c:
                    8f:10:a0:9f:16:54:c0:cf:59:a2:28:1b:71:00:59:
                    b2:3f:2f:f2:1f:d1:3f:87:63:b4:7f:75:e0:b9:14:
                    de:03:9f:cc:8c:7d:a5:ea:44:25:d7:19:6a:cd:df:
                    b1:57:bd:19:59:98:f8:16:d4:eb:c7:cb:2c:73:cb:
                    57:e3:3f:1e:9b:a2:18:11:fe:48:ba:41:2c:ad:07:
                    49:32:cc:44:34:b2:2b:0a:e2:fa:8b:f8:5a:20:66:
                    69:aa:1f:df:5d:bf:51:df:f3:a8:3a:3b:da:99:0b:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:5C:00:95:3D:74:25:7B:A0:4D:BA:CE:2A:29:B9:EA:D8:74:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl

            X509v3 Authority Key Identifier:
                keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:76:c9:cc:3f:71:4f:10:f5:0f:7e:fb:66:5f:95:df:ac:
         81:8f:b2:af:ae:5b:92:a7:46:b8:d8:ed:fc:3d:df:c2:7b:12:
         4b:1d:08:4c:a7:14:33:ce:3a:f7:4b:de:48:7d:79:55:50:9e:
         a9:d4:a7:52:7e:20:2a:18:b0:dc:bd:f1:9a:2d:4d:3e:19:ff:
         89:75:4d:78:a8:00:d8:34:85:5f:51:fc:65:9c:29:c5:be:94:
         2a:71:08:91:88:43:65:76:0a:88:1d:66:b3:07:ae:cb:3d:4c:
         0e:34:8e:60:fa:8c:ba:d6:aa:02:68:80:28:46:25:af:44:22:
         01:c0:51:6f:19:9f:f3:41:c6:e3:16:3f:26:78:c7:ee:2d:53:
         82:1a:3b:fb:4d:a3:45:58:a5:5e:8f:e5:f8:25:2b:04:15:68:
         a6:e7:5b:0b:da:b7:af:74:3d:a3:7f:2b:a8:aa:c3:6f:96:37:
         6d:9d:8c:cd:52:0c:40:b7:b5:32:a6:fa:94:bd:d2:c5:80:d6:
         e2:9d:23:a4:60:77:b5:1b:4e:30:93:34:80:f2:f4:89:93:11:
         a8:66:ef:29:9e:e0:a1:89:6f:f5:5d:86:fb:df:02:b7:36:4b:
         92:f4:e2:9b:cc:65:9d:ee:da:55:62:fa:15:50:7d:9e:93:24:
         34:78:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:14 2025 by rpki-client