Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa
File:                     42595bcf-6395-3a09-aa56-88a1c857f0e6.roa (raw, json)
Hash identifier:          ClzG+ED1MWyZWYWJLitT6TbnNZFHjBWAX4HVwqBLCA8=
Subject key identifier:   ED:06:95:41:6F:A9:A3:E5:AF:18:90:D2:8D:B7:1D:91:5C:F3:F6:AC
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F43285849CBCF93B007BD0F07A0DB1900
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     3807
IP address blocks:        207.196.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:93:b0:07:bd:0f:07:a0:db:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=c6088d87-c745-47a3-b89a-95440833e7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:0c:11:f3:e2:cf:a3:88:e2:07:17:0f:0d:
                    66:07:ef:11:30:78:60:f0:48:33:e1:28:89:e6:fa:
                    db:9f:06:8c:52:f4:51:a7:4b:95:c4:4b:4f:85:04:
                    21:c7:7f:0b:b9:a2:a6:c8:0e:e6:57:86:eb:da:cf:
                    21:91:5e:fc:21:b6:16:8e:59:0b:15:17:ec:2b:04:
                    26:81:b2:2c:af:96:44:8b:99:85:d6:5b:c1:1a:f4:
                    b1:68:aa:ad:cb:27:91:46:51:45:bb:3e:17:47:d3:
                    74:27:02:d3:12:e8:c8:c7:8b:69:09:5a:3b:f0:2e:
                    a1:7e:e2:d9:08:3f:94:ed:2e:5c:b9:b4:89:41:1c:
                    5d:a9:e7:d9:e6:85:ef:66:8c:6c:2a:28:27:19:6d:
                    76:92:b8:66:8c:68:79:d0:26:eb:73:f0:bd:ca:0a:
                    20:be:82:05:6a:5c:49:00:da:32:0e:e7:c0:da:28:
                    c3:7a:2f:c4:d7:0d:12:48:b2:96:75:00:d3:ab:6d:
                    e8:69:bd:d7:f1:21:2d:d0:c7:ab:86:08:f0:20:ec:
                    58:69:a3:01:99:6d:00:94:42:2e:cc:cf:ce:df:5e:
                    7c:85:ce:aa:f8:cf:82:f9:64:81:8c:f7:67:25:fa:
                    aa:2e:7e:e0:a9:c8:ca:f7:e8:49:f6:21:57:42:6c:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:95:41:6F:A9:A3:E5:AF:18:90:D2:8D:B7:1D:91:5C:F3:F6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:df:83:c6:0e:3c:b7:08:e9:91:ec:3b:7a:c4:ce:b6:56:
         c3:8b:41:26:7b:fd:68:3e:9a:67:1a:00:2d:65:a7:e2:8d:d7:
         18:f5:cc:f9:98:1e:74:96:ed:ec:79:f6:f2:e0:6a:72:cf:00:
         52:96:f3:0d:f4:86:9e:66:21:c6:b3:00:69:ee:6c:5f:ed:87:
         86:11:5a:27:8f:5e:77:0b:f5:4e:23:77:e0:86:b5:5f:f8:0e:
         59:9a:9e:9a:60:bd:2f:9d:ec:1e:7e:f3:fa:af:3e:df:58:21:
         c9:6a:30:ec:4e:6e:fe:64:9e:86:f7:f7:73:29:97:3a:e2:4f:
         f1:e0:b0:eb:b6:3c:35:89:43:2b:86:61:78:69:36:5f:82:ff:
         bd:5f:8a:86:b2:22:12:9f:02:b4:71:43:74:e9:ee:52:02:7d:
         d9:2f:ef:04:4d:da:e6:21:b7:85:01:8d:f9:72:6d:39:9f:00:
         fb:e9:a7:3d:04:fb:da:d1:e8:82:ba:5b:54:f9:44:19:10:a2:
         3f:89:f6:8d:06:a4:fb:d6:31:e8:17:77:94:3e:0d:df:31:20:
         e6:f0:0f:99:ff:39:9a:c6:b7:44:9f:be:9f:fe:a7:b3:b4:95:
         75:e4:d2:2d:c2:e0:72:61:37:eb:3c:e4:b5:cf:18:76:b7:5d:
         21:17:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:10 2025 by rpki-client