Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa
File:                     8943ba76-2440-3676-bc94-655519f6b1ba.roa (raw, json)
Hash identifier:          eWDYIlfzeqZJ+nYZao/PoINdc118LJbtuNCJQ8IEVgg=
Subject key identifier:   0D:AF:91:50:9F:6D:04:0C:2D:48:C4:75:FF:A5:5B:A2:EA:A3:E3:00
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584A82AB46CEA85E4FEB87B47080
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     10384
IP address blocks:        152.85.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:46:ce:a8:5e:4f:eb:87:b4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=6c8f7e9b-a29b-4d6a-931b-49d321fda7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:a7:91:57:73:1c:21:7c:97:37:c3:e2:cb:
                    43:13:84:71:52:e1:a0:06:10:b3:20:b0:c9:8c:e7:
                    0a:78:b9:3f:d9:66:51:07:9e:aa:80:45:07:c9:6e:
                    d1:24:51:2f:b5:5b:8b:c6:53:0b:b8:b5:0c:fe:72:
                    c9:e7:3d:bf:25:64:e4:e7:55:07:7e:0a:be:f3:22:
                    7f:45:19:4d:23:2f:f5:16:c6:51:08:d9:ed:4d:e5:
                    0d:ed:f1:12:db:0f:38:18:5a:54:82:bd:c7:64:17:
                    a9:aa:92:50:b0:6d:65:6b:c7:c7:04:a2:79:ab:e7:
                    33:05:26:65:2c:89:96:bd:e7:b8:75:58:97:fc:4a:
                    2f:98:f2:07:e1:ae:28:ce:09:ae:ea:af:f6:e1:2e:
                    ce:68:77:02:3e:38:31:62:60:08:15:c6:05:81:3f:
                    f3:ff:e6:e1:ac:2e:aa:81:90:08:84:be:6c:4a:0c:
                    31:bb:2c:5e:7d:e6:b0:69:03:19:97:be:f1:b3:37:
                    d9:06:5d:0b:91:0d:78:0c:3f:93:a4:3d:08:bb:f6:
                    f8:cd:ea:8f:b0:aa:a1:5d:9b:00:bf:6f:36:a9:4a:
                    63:47:5b:03:62:71:a8:c3:33:fe:7f:63:ea:99:9c:
                    43:01:8e:76:d6:04:5a:5e:ea:21:2e:5c:43:bd:0f:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:91:50:9F:6D:04:0C:2D:48:C4:75:FF:A5:5B:A2:EA:A3:E3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.85.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:03:53:a5:45:41:a8:b2:a5:41:66:db:fa:6d:e0:dd:ea:d4:
         f0:27:1e:4b:2e:36:c1:ec:2b:a8:43:f0:d4:ca:64:b2:a7:dc:
         ac:bd:15:ba:82:4d:10:82:7b:d9:21:01:2d:c7:a2:80:87:6c:
         72:b7:9c:c0:8a:9c:a3:c6:ba:80:3f:f1:c6:8b:71:9a:2b:e6:
         76:5f:e1:9a:c7:96:23:b0:cc:3e:21:db:11:6f:2a:da:33:c7:
         23:b8:8f:aa:7e:ca:c8:7d:06:ed:ea:ce:84:19:7a:69:8f:b5:
         bc:5a:bb:22:67:12:28:b9:0d:34:07:f5:46:05:42:93:2f:05:
         68:ac:30:59:d3:6a:29:e8:6b:98:ce:14:f4:77:6c:f3:82:d7:
         9f:7e:71:01:48:81:f4:cd:f3:a6:0c:c2:65:dc:eb:cc:b7:85:
         84:fe:8e:a9:d5:1c:21:75:a3:0e:cd:53:ab:6f:15:d9:c6:76:
         6f:0e:a7:bd:34:3d:7c:cd:dc:43:0d:c7:1f:7e:50:26:ce:1d:
         cc:30:bb:45:a6:17:f9:52:79:3e:c8:be:bf:1b:5a:78:2b:83:
         e9:8c:db:da:0f:ac:f6:45:ce:02:20:e6:c9:d0:d1:d4:75:f1:
         0f:d3:e7:bc:35:25:58:ce:29:8a:6e:3b:87:8a:7d:15:e2:d5:
         cb:2a:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:47:54 2025 by rpki-client