Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/558425b4-8582-395f-bcc2-c4438a9807ae.roa
File:                     558425b4-8582-395f-bcc2-c4438a9807ae.roa (raw, json)
Hash identifier:          D9EAMruqqpNBr2RO+zYQSJbZz7w2+jVGFY4sBp2xTkk=
Subject key identifier:   A0:3E:5B:7B:42:52:DC:68:98:24:70:0D:F2:B1:7F:B0:E4:5C:8E:ED
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2761861279A8B68D7986D500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/558425b4-8582-395f-bcc2-c4438a9807ae.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     15290
IP address blocks:        71.19.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:86:12:79:a8:b6:8d:79:86:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=81259007-617a-4146-8d72-5eb62b3d2701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:4c:ab:2f:c2:78:d7:6b:43:7a:05:eb:e8:
                    6d:4a:54:ec:a5:46:b3:03:49:ce:4a:e5:a7:51:7f:
                    d1:23:0e:26:1b:cc:71:eb:12:21:ca:85:a5:f0:91:
                    f6:7f:22:0a:43:e4:da:7c:79:d2:fb:bc:b6:4a:0c:
                    62:d8:c4:94:cf:4e:a5:60:7c:b8:73:ea:fe:16:66:
                    04:66:c4:20:01:a2:6b:1d:97:69:4b:b9:6f:f9:df:
                    e4:37:b1:7f:ea:49:e1:26:88:07:83:5d:10:e2:ee:
                    73:9b:6f:b6:73:4a:46:aa:d3:e1:cf:ee:a9:d0:1e:
                    64:23:1e:67:25:c4:e9:66:17:0d:f9:8f:37:eb:32:
                    1f:44:04:95:cc:20:ae:f3:3c:76:24:2d:02:cd:15:
                    a5:b0:bd:0e:70:3f:bc:66:cd:d8:21:0c:0d:d2:70:
                    03:88:24:03:70:ed:e1:9b:77:2a:1d:9e:6e:9b:b3:
                    16:4d:35:a4:48:c7:2f:b1:32:db:b6:0e:e1:f2:65:
                    cc:c3:04:e6:e6:92:06:22:85:13:c0:ee:bf:d2:67:
                    45:ef:29:a1:75:3c:b9:0b:9f:84:22:93:3f:a3:2d:
                    42:2f:00:65:0a:ad:00:99:f9:ad:2a:6e:24:39:8f:
                    a0:23:ad:f2:b3:c7:37:76:9b:f5:61:1d:5c:86:62:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3E:5B:7B:42:52:DC:68:98:24:70:0D:F2:B1:7F:B0:E4:5C:8E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/558425b4-8582-395f-bcc2-c4438a9807ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.19.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:1f:a1:13:b6:19:10:ec:54:fc:20:5b:7b:bc:f1:c6:a2:
         27:c2:5c:60:46:a4:68:b3:00:79:1f:f2:b2:63:61:8c:b3:90:
         4b:a0:17:1f:6e:17:f1:fc:c5:9a:f2:39:03:d7:5d:11:b0:f0:
         f5:04:fa:04:39:6a:08:01:07:e1:e7:43:58:b4:0c:ef:fe:1b:
         3f:7d:5c:39:07:8a:11:7b:41:f7:80:4b:81:44:52:ca:04:24:
         65:ad:de:68:9a:e4:b4:e0:67:a3:eb:47:a5:90:fe:08:4f:ca:
         ab:4b:e9:35:7f:11:18:32:fe:e1:6f:82:f6:d8:fa:7d:b3:2e:
         79:d5:e3:d6:a8:51:da:4a:d4:e9:18:e2:d2:d7:01:1b:5a:dd:
         e9:d3:c8:5d:ec:4d:f2:dd:4a:d5:2e:33:05:aa:09:b0:24:b2:
         cd:b7:aa:9e:68:5a:5a:9b:32:f3:1a:b8:ef:29:02:34:a5:bc:
         23:79:e5:48:20:92:b6:8f:81:a2:98:6e:cf:c5:66:ac:73:b9:
         f1:53:40:a9:63:a7:12:e3:57:2c:d9:26:f4:04:99:23:20:33:
         5e:62:d4:d7:0f:5e:b4:61:6e:fc:06:cc:0e:99:db:80:a2:ba:
         02:67:fa:24:ee:2f:1f:d3:a7:b9:37:17:8f:5a:50:6f:8e:76:
         61:74:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:05 2025 by rpki-client