Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa
File:                     d2c7549d-7dcf-3897-85fa-69af9d414cee.roa (raw, json)
Hash identifier:          Acc6kX1OUurmIULAhV16LLbCSFYZ6nkfY44wtj5b7hU=
Subject key identifier:   24:D1:CC:E1:5B:90:60:5E:2C:DC:23:F6:B6:1A:B6:48:07:DC:0A:7C
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584A936B59CB6B0C45689B2B9680
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     45691
IP address blocks:        130.51.98.0/24 maxlen: 24
                          130.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:59:cb:6b:0c:45:68:9b:2b:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=de76f16e-aa1f-4817-81fb-fcf911fd0ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:c9:a6:e2:57:71:77:cb:3c:33:e2:6c:c3:
                    a0:e4:96:de:12:61:77:80:7a:3b:ea:52:b0:50:77:
                    48:ac:ed:4f:04:f5:af:8d:b8:41:f3:80:f0:86:0d:
                    a5:1d:13:38:4c:f6:64:57:38:21:8c:37:53:da:bb:
                    02:fb:ce:12:4e:78:e8:07:3d:1f:23:6c:b4:5f:ea:
                    e5:5b:04:57:60:ff:de:a4:1d:60:fe:ea:27:d3:2d:
                    f2:b2:c8:d3:db:6e:cc:58:94:21:8e:a2:9c:c0:12:
                    ad:c5:8d:b2:f5:52:30:ee:bd:24:20:c9:bf:2c:8b:
                    90:b0:9a:ba:5b:66:5d:e0:c5:62:b5:37:4e:b9:55:
                    ad:3b:39:34:97:90:68:73:04:6f:94:ed:36:99:00:
                    0d:07:77:cb:f0:54:d1:41:ca:2c:a9:c6:8f:67:88:
                    a5:65:60:88:2e:02:c9:15:b9:e5:e5:95:3a:f3:10:
                    42:02:bf:5b:77:3d:c0:68:a9:37:6d:f4:a6:a1:0d:
                    d0:19:a2:5d:fe:14:38:81:83:02:e1:a7:1d:e9:b5:
                    44:5d:76:a4:13:7f:b1:87:6f:57:0e:0b:7a:ac:a5:
                    0b:ac:82:8b:db:5e:85:0a:af:fe:9e:2a:3f:0d:92:
                    c2:db:ef:fa:26:a1:e2:b4:09:17:43:5a:78:c8:73:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:CC:E1:5B:90:60:5E:2C:DC:23:F6:B6:1A:B6:48:07:DC:0A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:0e:25:4d:ef:02:96:be:41:f6:83:82:e8:2f:ff:1d:46:
         a9:73:cb:da:b8:24:80:63:1c:b0:15:69:99:74:6a:e9:d2:4c:
         27:dc:61:6e:d3:d2:e5:29:a1:c4:12:c7:10:db:2f:7b:8e:5b:
         99:a0:25:95:70:50:8b:0b:23:f0:30:45:26:3f:0c:d2:67:05:
         64:e0:6d:a2:f0:a7:f1:12:2d:ae:61:46:89:ee:3b:10:75:29:
         c5:f2:2e:56:6a:02:46:5b:32:7f:97:4d:60:ea:98:91:ca:3d:
         74:b6:15:a5:17:f9:15:f7:89:65:10:ad:e6:54:74:2d:ba:8b:
         0c:47:69:fe:07:55:29:ca:ea:07:01:55:e5:bf:94:f9:09:7f:
         0d:82:9c:ac:06:61:c6:bf:c8:06:2d:30:d2:52:95:5e:20:1d:
         49:c6:3d:03:a7:6b:6b:1a:69:72:25:00:72:97:b2:57:a6:14:
         af:b3:ba:fe:22:45:5b:d3:90:66:48:23:5b:03:b3:78:84:ae:
         53:af:c7:5a:ef:d7:3f:c3:f4:fb:b6:e7:db:1d:6a:28:7e:4c:
         45:d7:ea:31:7e:8d:a7:29:77:f9:ad:bc:9f:99:72:d8:1e:cb:
         57:b8:9c:97:95:47:5b:a2:1e:da:73:11:69:f5:fa:5a:40:78:
         8b:43:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:13:00 2025 by rpki-client