Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/918e9dad-ae1a-3040-a622-c2db2aa69da8.roa
File:                     918e9dad-ae1a-3040-a622-c2db2aa69da8.roa (raw, json)
Hash identifier:          YM4VM9hLBCvIRYrpBJR66uq3hKe7cx1gKSAHVhPlStc=
Subject key identifier:   55:3A:B9:D9:96:D9:0C:0E:29:36:C4:23:42:03:DB:D1:74:37:15:39
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964B2B397BECD7EC34E980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/918e9dad-ae1a-3040-a622-c2db2aa69da8.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     17359
IP address blocks:        208.89.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4b:2b:39:7b:ec:d7:ec:34:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=bb50ead7-b5a2-418f-98b4-32aa0602764c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:98:99:ba:02:a8:40:9e:4c:9b:2c:ab:87:
                    0a:37:98:41:8a:3d:8e:1d:4e:11:6f:a4:5b:53:58:
                    fd:1f:f9:c6:32:55:c9:3d:44:b4:3f:de:9f:cc:b4:
                    3f:2c:36:b0:c4:94:2f:8c:38:cb:72:94:fc:37:2a:
                    95:0b:f7:7e:57:db:ca:70:de:da:36:d0:1d:53:c8:
                    63:d2:08:31:a1:eb:f7:16:7e:65:93:69:87:21:bb:
                    5c:0c:54:a2:9e:1a:cb:09:73:b2:0d:d1:a9:74:44:
                    7c:6d:83:53:bc:9c:d0:f6:0e:9f:f0:59:4c:6d:57:
                    44:23:0b:88:68:24:e2:4c:eb:3a:a5:55:0e:c4:cf:
                    7d:8d:0e:99:af:e0:d7:a4:16:32:48:1a:80:18:df:
                    98:61:7e:41:3a:24:1c:fd:12:f7:f1:2a:52:8d:36:
                    6d:05:03:ae:ce:a7:33:a2:09:13:86:b4:6b:02:6c:
                    68:3e:5d:ca:a2:43:7d:c0:72:b3:20:8a:b2:77:68:
                    c7:d5:4f:70:e9:92:a1:83:de:8c:1f:4e:db:28:36:
                    8c:02:04:aa:19:7e:d6:da:40:88:8c:24:cc:ea:e9:
                    9c:38:35:09:6c:20:81:25:7e:06:ee:15:01:c6:4c:
                    04:4f:db:fd:4b:b8:e2:73:75:0c:bb:bf:f7:3c:4b:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3A:B9:D9:96:D9:0C:0E:29:36:C4:23:42:03:DB:D1:74:37:15:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/918e9dad-ae1a-3040-a622-c2db2aa69da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:f7:f7:2f:6e:78:ab:d8:1d:c6:b6:a0:c3:68:01:b3:80:
         83:b1:df:c3:b1:2b:de:fd:a9:12:43:2b:db:89:6a:a9:77:ee:
         ec:7f:c3:67:da:20:b1:e9:6e:0d:09:d0:12:3c:7a:39:b9:4b:
         bc:e2:b6:32:45:a1:ec:b7:3f:4b:1f:2a:d5:77:b2:88:fd:4d:
         af:26:3c:17:d5:69:18:b4:a4:07:0a:16:be:a4:8d:4b:96:38:
         01:6f:1d:42:b6:79:1b:da:97:3c:07:64:71:92:21:da:33:48:
         85:f8:7c:4a:9f:32:67:58:de:cc:dc:04:eb:d7:34:00:d4:d6:
         89:c8:b5:01:e2:0c:6c:c5:f4:4f:4b:be:f1:03:69:c6:88:b1:
         82:2f:eb:91:00:12:40:d4:46:30:0b:a7:66:9c:94:9a:2b:5b:
         97:54:09:65:9d:02:52:de:f0:78:f7:b7:25:9a:f7:29:80:38:
         99:fa:5d:f4:20:c1:f5:48:ac:be:ef:d7:36:29:1f:30:fa:45:
         59:1b:12:65:c6:ff:fc:68:70:15:5d:a8:9c:5a:58:e1:c4:e0:
         44:d6:b2:e6:61:13:27:e5:63:c8:ea:08:6c:f8:49:63:13:62:
         fb:94:00:98:27:86:be:5d:e2:ef:9c:49:bd:ff:3d:05:88:7a:
         2a:07:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:34 2025 by rpki-client