Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0765ebcd-eed0-39db-82a3-686d0564ed7f.roa
File:                     0765ebcd-eed0-39db-82a3-686d0564ed7f.roa (raw, json)
Hash identifier:          f4b/o5WGdkhDSYf1NXBotPv8C38s2myvBnriWmG0/ZI=
Subject key identifier:   C3:68:02:C2:E1:AB:B0:A7:E0:E3:CD:DD:27:DF:97:7F:52:24:6E:AC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584AFAB686EBB32BC761DC132980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0765ebcd-eed0-39db-82a3-686d0564ed7f.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     54113
IP address blocks:        157.52.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:86:eb:b3:2b:c7:61:dc:13:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=873bb189-41d2-4dff-8d78-2347d80ab2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:f1:d5:ab:5d:42:ed:1c:9f:15:ae:51:96:
                    95:96:aa:20:16:b5:40:9c:2b:3a:1e:9f:7f:cd:51:
                    19:da:0a:31:4c:be:3f:7a:a0:ab:b0:02:8e:3e:cf:
                    67:55:da:2d:af:33:f0:0b:36:0b:96:44:e8:68:60:
                    e5:30:81:df:ef:1c:1b:fb:67:95:c3:0d:e4:6a:81:
                    69:59:af:32:9c:df:33:43:08:8b:a1:58:5c:1e:eb:
                    03:61:a9:b4:8e:6c:99:f1:af:46:ff:f5:48:f3:e5:
                    cb:ed:19:6c:c8:20:a0:1b:d5:32:b9:91:f9:ae:33:
                    2d:32:3e:e6:f2:48:cd:47:70:b1:28:f6:d0:0d:00:
                    7a:bc:d6:02:ba:f5:90:33:8e:43:92:b7:3c:c5:01:
                    b3:40:93:8d:0f:be:ae:72:9c:4b:20:ff:6d:53:9e:
                    c8:97:77:8b:b1:1a:aa:ce:2c:6f:de:b7:0f:54:29:
                    5e:be:04:8c:e8:71:7e:33:46:d9:67:81:01:51:49:
                    48:d6:a3:ee:62:59:a6:e6:06:65:34:1d:6c:41:cf:
                    85:fe:a9:7f:8a:e5:71:c9:14:fc:7f:7b:93:53:bf:
                    3c:94:de:12:ed:7a:52:f4:90:07:ad:e2:af:db:67:
                    a7:2e:5b:18:65:d6:f5:38:dc:8f:89:8b:82:fb:fa:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:02:C2:E1:AB:B0:A7:E0:E3:CD:DD:27:DF:97:7F:52:24:6E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0765ebcd-eed0-39db-82a3-686d0564ed7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:39:16:20:e1:21:4e:c5:c7:c8:ec:a6:fe:0e:bf:32:47:73:
         63:b5:96:5e:7b:c5:ee:35:34:5d:25:3e:0d:d4:68:28:2b:61:
         e2:da:73:2a:63:ab:68:21:db:2a:82:b1:81:0c:d8:15:4f:2f:
         ee:b5:31:57:c8:da:8e:a6:78:92:e5:6b:35:f7:26:b3:9b:2a:
         ee:48:b8:01:9f:19:73:f1:44:6d:7c:8d:51:c4:9f:06:41:0a:
         a2:bb:da:02:de:df:0d:17:ba:ac:7b:7e:e2:66:b9:9f:94:f7:
         02:58:55:1a:2e:0e:53:7b:13:16:59:e5:6e:9d:17:46:32:68:
         81:9d:49:12:8d:3f:38:00:e7:52:dc:fb:ba:94:7e:b6:8b:72:
         e3:a1:a9:b7:c4:17:62:8a:d6:85:3b:20:32:75:ad:38:27:47:
         29:9d:42:7d:88:fc:f3:50:65:8d:b0:d4:61:05:41:63:a1:de:
         3d:8e:0b:06:b1:12:e1:cd:f2:9c:c2:a6:79:32:ea:82:15:b4:
         98:d2:02:07:eb:90:1d:2c:ae:2c:0b:d6:79:78:2c:9f:46:87:
         e9:92:e3:fd:6f:d2:43:99:e4:27:dd:de:7b:4f:89:97:21:16:
         9e:a1:73:2f:1f:34:5e:c8:f6:8c:79:a2:1b:3d:b4:c3:4c:66:
         66:58:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:24 2025 by rpki-client