Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/293e1db1-3a76-3c85-99b8-43725a1d3be9.roa
File:                     293e1db1-3a76-3c85-99b8-43725a1d3be9.roa (raw, json)
Hash identifier:          hdCkf/7Hqy23VEK/+uE68t6H3YHzQiFYEga8RdgnAw0=
Subject key identifier:   D9:D7:85:AE:37:51:46:C8:32:F7:41:8E:00:32:82:80:50:9A:8B:DC
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584B265E61D2A5F7D3E29AAB4400
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/293e1db1-3a76-3c85-99b8-43725a1d3be9.roa
Signing time:             Wed 10 Sep 2025 16:18:35 +0000
ROA not before:           Wed 10 Sep 2025 16:18:35 +0000
ROA not after:            Tue 09 Dec 2025 17:18:35 +0000
asID:                     2914
IP address blocks:        167.253.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:5e:61:d2:a5:f7:d3:e2:9a:ab:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Sep 10 16:18:35 2025 GMT
            Not After : Dec  9 17:18:35 2025 GMT
        Subject: CN=6008a574-d54c-4b42-bb08-42cde00d7422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:79:ba:70:a8:20:1c:39:f9:22:b4:6c:63:
                    d2:3b:6b:81:ad:37:2d:e4:8a:d8:b9:d1:39:9b:21:
                    d4:a2:a3:13:58:32:74:b6:ca:d1:2e:03:8f:cf:8e:
                    4a:9d:3b:44:0d:82:a7:b8:12:e0:2b:ad:13:0f:c6:
                    22:59:7c:3b:fd:19:ba:fe:df:68:0b:c1:96:fe:4a:
                    f4:bb:65:c3:41:5f:66:3c:10:74:e4:56:00:d3:6c:
                    c3:a6:fa:83:d5:7f:63:d0:6f:5c:a6:19:d2:e0:6e:
                    69:c4:0a:df:01:24:74:ee:67:0c:16:5a:be:8b:91:
                    ed:e5:6d:85:eb:bc:b3:fd:63:ad:52:39:83:9f:ae:
                    00:38:b9:e8:7c:18:c1:5d:53:ae:a2:71:fd:80:f1:
                    a8:27:42:97:1a:b9:52:3a:9a:df:a7:b3:c4:09:a8:
                    ba:f7:cd:0d:32:71:a3:83:99:fd:4d:02:38:46:d6:
                    ff:4d:88:c6:b7:1c:d2:2e:b7:30:6c:49:1e:d5:07:
                    ac:82:4c:01:df:f0:1a:c1:97:f5:6e:e1:90:eb:d3:
                    d6:ad:02:e1:90:48:0e:1a:f4:2e:b8:90:a8:93:d0:
                    9c:06:ce:15:6e:22:33:04:23:16:59:9e:30:6d:e9:
                    28:b1:45:98:94:32:85:c3:32:dc:bc:32:a0:d6:67:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D7:85:AE:37:51:46:C8:32:F7:41:8E:00:32:82:80:50:9A:8B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/293e1db1-3a76-3c85-99b8-43725a1d3be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:39:2a:23:75:0e:15:ee:1e:68:98:cd:3f:60:d3:6d:a8:dd:
         a1:de:58:82:8d:29:5e:98:6d:c6:f0:e7:88:3e:a0:64:89:df:
         84:1b:dc:c1:59:05:47:e1:03:5d:e4:90:7d:7d:9f:a0:4e:7c:
         d6:70:4b:b9:2d:6f:88:70:31:d0:1b:10:ac:63:f0:41:05:3c:
         6d:dc:fc:5c:ce:a6:3f:3f:ff:9e:68:f6:f4:91:3f:7b:fc:0a:
         4e:ce:01:32:d0:22:d8:c7:e5:18:e7:1b:2c:02:21:39:45:8c:
         84:c6:02:2d:b0:5b:36:a5:05:f4:56:ea:18:75:68:f4:b4:fc:
         7b:48:b6:6a:de:67:45:bc:d6:5c:e8:68:29:96:9f:60:65:3d:
         d2:f6:99:ad:c4:37:0b:27:a9:4e:04:bf:33:da:29:df:62:0e:
         33:8d:eb:d1:0e:4c:0b:d8:bb:67:e6:42:6e:cf:23:61:15:ac:
         ea:5e:20:1a:40:f3:74:7f:2c:24:70:cd:0d:d0:26:c9:d7:f5:
         8e:e9:15:95:8d:0b:5b:b7:dc:44:2f:70:b8:60:c5:60:d7:d2:
         cc:ee:5f:5c:38:2a:da:45:51:11:71:34:ba:8b:ee:bc:a0:4c:
         b9:bb:b5:48:c8:cb:70:3d:7d:35:c0:6f:17:46:8c:b3:af:db:
         30:bd:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 12:01:34 2025 by rpki-client