Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2951395b-d549-3af3-ae18-6344c005e079.roa
File:                     2951395b-d549-3af3-ae18-6344c005e079.roa (raw, json)
Hash identifier:          wrMger8u3vyF1aIH6Iq95GepjWdigPPzmGXk1d9/aeA=
Subject key identifier:   89:EC:97:52:00:36:F1:3A:35:99:3A:38:6E:E8:7D:3B:50:22:2B:4D
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584A606DBB1496FFB2E2D94ED300
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2951395b-d549-3af3-ae18-6344c005e079.roa
Signing time:             Tue 01 Jul 2025 18:39:27 +0000
ROA not before:           Tue 01 Jul 2025 18:39:27 +0000
ROA not after:            Mon 29 Sep 2025 18:39:27 +0000
asID:                     53808
IP address blocks:        216.238.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:6d:bb:14:96:ff:b2:e2:d9:4e:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jul  1 18:39:27 2025 GMT
            Not After : Sep 29 18:39:27 2025 GMT
        Subject: CN=b851ea48-0b63-4228-b2f6-1179577e3626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:61:66:da:57:0a:3c:a8:c6:bd:a4:05:9f:
                    46:a3:16:f9:b7:c7:8e:99:47:29:38:8f:d0:57:d3:
                    3e:1c:84:e6:30:e6:46:11:0c:53:ab:56:7c:09:e1:
                    94:04:b7:15:76:d7:1a:31:fb:ae:08:94:42:88:c6:
                    8b:e3:93:6c:1a:22:02:9a:c4:bf:d3:8f:06:f9:d8:
                    62:3b:f5:50:9c:1f:a3:a0:d2:8f:8b:cf:22:06:9f:
                    62:56:03:0f:1f:b5:db:4d:9a:32:d7:c4:76:3c:ad:
                    0d:30:fb:45:1c:0e:ac:35:59:7a:c5:de:d3:29:43:
                    3a:55:66:d4:da:48:16:d0:0f:df:57:ee:99:13:40:
                    02:79:ee:88:de:a3:1a:49:62:97:60:4d:62:02:6d:
                    c5:c9:86:68:9c:06:35:46:93:1c:84:6a:fe:e1:2a:
                    c5:b5:e1:78:7f:7e:6a:97:f1:9c:ff:2a:62:42:bf:
                    ea:db:7a:4d:2e:44:d0:0a:4a:82:f1:b1:89:23:8f:
                    a9:ee:d2:e6:a7:f8:b7:34:70:5c:96:28:31:a7:25:
                    aa:c8:a7:c4:e4:fa:d2:d9:53:fd:cd:9d:fc:58:92:
                    77:2d:ef:16:8d:3f:3b:2b:e9:77:c3:81:c0:fe:f2:
                    8f:3c:a1:4d:08:04:47:b2:90:0b:a0:26:3d:10:28:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EC:97:52:00:36:F1:3A:35:99:3A:38:6E:E8:7D:3B:50:22:2B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2951395b-d549-3af3-ae18-6344c005e079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:dd:2f:ff:f6:a8:e9:a6:6b:4d:8a:88:d2:1a:fc:54:77:
         0f:3e:1f:bc:3f:1c:25:a6:b8:ec:48:71:88:a6:73:49:d5:fe:
         7f:c1:67:72:9e:bd:32:f8:7e:ff:1e:80:54:c4:e1:4e:97:1d:
         ea:a7:27:b2:44:9d:ad:f7:c5:27:11:39:30:b9:7d:f7:15:5e:
         d8:6c:a9:10:1d:b4:cb:03:af:37:62:d3:b0:f6:9e:77:73:84:
         59:42:04:e6:eb:58:cb:bc:e3:8f:7b:5b:93:2e:93:3c:82:36:
         b8:ef:55:69:0c:72:79:d6:1a:f4:55:d3:e3:dc:d8:3a:14:f7:
         29:da:4b:fc:2e:87:a5:7f:39:5f:a5:94:9d:aa:1c:f5:ac:d1:
         aa:b1:a8:8a:96:54:0f:0e:a6:1a:4e:35:03:d3:f5:5c:04:13:
         25:15:32:9c:21:38:d4:f2:58:e3:33:a1:24:99:5e:6c:ec:06:
         03:f3:44:f3:c3:4a:25:ac:b2:c8:03:03:fc:0a:7e:b1:50:8d:
         d6:60:b0:5d:99:29:97:0d:4e:7a:30:50:df:cc:e0:5e:ef:8d:
         f0:e8:1a:1e:a0:ec:a3:0b:7d:e2:db:da:5f:6d:26:b8:80:df:
         39:7b:3a:f7:59:bd:fb:dd:24:7e:a3:42:a2:1e:80:ad:c8:30:
         1c:57:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:28:30 2025 by rpki-client