Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
File:                     6638f874-6d79-393c-8793-4fb63bc1f4dc.roa (raw, json)
Hash identifier:          GTbIhSpBwS/jS4+isfR3M7Ar9zvDporHCaZ3QaH0Nhk=
Subject key identifier:   13:8F:77:33:F9:86:56:CA:D5:E1:24:FD:B7:7F:0F:C3:B2:79:55:9F
Certificate issuer:       /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Certificate serial:       010D0C9F4328584B08ABF1A198091EC04B376DE0
Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     20
IP address blocks:        192.5.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:f1:a1:98:09:1e:c0:4b:37:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=62d2c4ac-357a-4295-a24d-3d7f53b1b4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:a1:b6:4d:56:be:42:68:ca:14:4e:b0:f0:
                    01:5a:d5:b8:be:37:aa:96:0d:0d:0f:20:8f:ea:ba:
                    fe:45:0c:e5:de:85:74:84:bf:2f:d0:2c:25:ed:47:
                    57:ce:c9:6f:dc:f3:e2:c6:d8:f0:da:4e:a9:91:20:
                    38:77:47:f4:6e:80:30:78:4a:6e:5a:5f:0c:56:bd:
                    e5:ef:8b:d0:c1:42:57:d1:bf:ef:da:f5:1c:8f:50:
                    e0:a3:c5:59:e6:30:3b:8c:7c:d2:d0:94:57:fe:f7:
                    2e:90:6e:ea:0b:40:a1:14:9e:47:05:d0:03:44:21:
                    14:be:56:1d:95:82:41:47:79:a2:fa:35:b6:bd:e4:
                    98:69:78:b6:04:e7:b3:22:0d:68:8c:52:91:97:4c:
                    38:f4:22:30:d8:ea:ee:98:c2:7a:20:eb:0d:83:02:
                    7b:5c:73:8f:2b:37:97:68:2a:d4:21:ff:08:01:ae:
                    0d:fb:0b:c6:51:9c:3b:47:38:43:d3:6a:4c:a3:6d:
                    73:4b:69:ac:c0:8a:aa:9c:f2:b4:44:ae:8f:20:55:
                    94:65:3c:fb:0d:72:bb:c6:d0:f3:fb:de:38:46:5e:
                    fe:95:01:ba:07:68:a7:f7:07:cb:63:29:26:00:ec:
                    35:0e:11:06:de:ab:41:0b:80:f3:09:0f:a5:a3:09:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:77:33:F9:86:56:CA:D5:E1:24:FD:B7:7F:0F:C3:B2:79:55:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl

            X509v3 Authority Key Identifier:
                keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:a2:91:ef:94:53:f6:51:6c:30:69:f6:c7:55:bb:ad:51:
         d3:24:34:e9:91:10:0d:87:29:8b:aa:7d:f6:f4:2e:9f:b5:ed:
         72:30:4f:09:cd:0f:91:ea:a3:ed:cd:c4:ed:90:10:ee:c3:30:
         59:ed:49:ac:45:64:b2:04:a1:99:de:22:e0:2b:cb:ce:d9:de:
         37:45:cb:8d:50:fb:b0:9c:43:62:c9:e9:c4:5a:b0:91:aa:28:
         10:a4:fe:72:89:04:32:77:ce:b5:58:5d:ea:14:17:cd:01:4e:
         45:26:01:f3:62:dd:7b:01:f8:05:93:39:30:40:5e:eb:4e:54:
         3f:a8:a9:b2:f2:2b:43:ff:b2:4b:bc:56:0a:df:31:db:4d:bc:
         72:d3:22:0f:dd:2b:56:e4:1b:57:17:61:ce:c9:c5:76:0f:80:
         8e:9c:2f:c8:e2:ba:6a:48:86:0a:b0:51:6f:77:52:1a:ce:22:
         35:1e:79:fc:0a:fa:6a:d7:9d:85:2c:03:ca:25:29:38:1d:a6:
         a3:c6:ea:91:c8:f1:ef:bc:42:b5:c6:48:d3:e4:4d:10:c1:be:
         9c:d6:a4:ef:9a:5d:84:88:42:99:58:b6:e6:00:4b:81:67:31:
         93:4b:fd:a2:57:45:01:44:03:23:d6:26:13:89:16:9f:73:68:
         3b:83:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:16 2025 by rpki-client