Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
File:                     8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa (raw, json)
Hash identifier:          ng8MJ9CyhTb6kTvdAr+U+/nIz2rhMEsyLhAg3h5HQ88=
Subject key identifier:   D5:17:DC:46:87:A7:D5:13:DE:03:08:4F:34:EB:11:14:D9:B6:9E:F1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A90A0F03A5809EF6646C51200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     54113
IP address blocks:        157.52.89.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f0:3a:58:09:ef:66:46:c5:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=a517745d-59a2-4e9f-9bf7-eeb938338638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:5d:26:92:e5:f9:f1:0b:16:2e:3d:1c:59:
                    e1:09:7f:fe:0f:59:ec:fa:f3:d3:af:97:48:c0:31:
                    ff:21:33:68:9e:48:83:fd:2d:2b:d9:6a:61:91:b8:
                    e6:91:8e:97:16:50:4e:6d:ff:3d:78:47:f4:33:76:
                    b5:8c:9c:2e:7d:91:6b:dd:59:7c:33:e3:1e:9d:46:
                    76:a4:71:08:95:49:f4:00:09:33:dd:02:7b:31:d2:
                    ae:2c:24:71:01:ca:0f:cb:34:ec:85:58:f2:fb:63:
                    fb:74:64:17:4c:c5:b2:17:f0:49:67:f6:b9:f7:ef:
                    90:ca:c2:0e:0e:70:75:ee:0e:b2:24:d2:1a:2c:9d:
                    73:6c:a8:17:bd:a4:cc:c2:76:31:2f:f8:84:27:ac:
                    42:97:56:69:af:08:3c:fa:f5:34:62:19:be:83:45:
                    48:ef:ee:d6:14:2c:2d:2d:02:bc:aa:2e:84:74:3e:
                    3e:6f:10:fd:24:69:55:66:e5:5d:5e:2c:56:f8:d0:
                    9f:53:89:7d:3d:78:25:95:c4:2f:39:ac:36:68:df:
                    23:c0:6a:85:29:23:f7:29:da:4a:97:1a:ac:bd:27:
                    bc:d6:ea:76:8c:a9:bb:ba:e1:bc:1d:53:19:fc:97:
                    c7:97:92:91:dc:ec:2f:92:5d:dd:72:07:bf:83:11:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:17:DC:46:87:A7:D5:13:DE:03:08:4F:34:EB:11:14:D9:B6:9E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.89.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:93:ad:f8:4f:d3:28:56:57:cf:66:3b:2f:5c:be:33:ee:91:
         87:5d:c5:02:49:1e:6b:7a:54:12:f7:ce:43:6c:19:cd:fd:81:
         82:88:3a:2f:b3:fd:b2:45:38:4a:be:42:bb:f3:21:11:b3:9a:
         5e:22:e0:53:ce:28:80:09:45:22:f6:82:4a:4f:c6:4f:9f:f8:
         66:4a:4d:a0:e3:ca:b9:6a:99:bf:cf:1f:63:3f:08:94:a8:43:
         ec:36:8d:83:9d:6a:e7:87:96:cc:dc:f0:b5:cc:7d:b0:28:85:
         79:a4:2c:8d:70:6c:6d:55:d8:25:88:a4:c5:08:99:42:5d:cf:
         7b:05:21:76:a6:84:dd:b3:41:fb:87:8a:ee:45:9d:63:62:66:
         e2:7e:fa:8f:dc:25:22:78:d3:17:0c:0b:8a:bb:08:a0:42:a9:
         b0:31:71:12:57:43:c0:0c:c2:7b:0e:77:4f:ce:6b:b1:06:2e:
         25:e1:0b:83:43:70:8e:9f:0f:e1:41:4b:a5:a5:27:e9:fa:78:
         8f:18:ff:61:d9:6b:27:4a:a5:8f:1f:12:20:4b:c7:81:1a:2f:
         dc:d5:67:29:fb:fd:34:12:82:d7:53:33:37:96:1d:29:68:ef:
         b8:30:cb:87:9d:10:80:0c:16:53:45:46:45:34:fd:c3:98:47:
         4a:56:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:07 2025 by rpki-client