Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6097d637-bde8-38cd-863e-9ce39a5e09c7.roa
File:                     6097d637-bde8-38cd-863e-9ce39a5e09c7.roa (raw, json)
Hash identifier:          TKTy9UEEqR6o1hXExPfTADeB702QUnPDHPLsOX5G6GY=
Subject key identifier:   67:D4:42:41:96:FD:30:7C:19:1C:46:85:92:BA:EC:0E:0D:D5:62:D4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F32F115BF6FB5D3948C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6097d637-bde8-38cd-863e-9ce39a5e09c7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f3:2f:11:5b:f6:fb:5d:39:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=d2bb72d0-3f49-4ff3-9014-432919c33cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:0a:c0:c3:4f:74:88:83:f9:ea:46:f7:c2:
                    58:d8:25:dd:5c:18:5a:0b:89:7f:34:a1:da:4b:19:
                    a8:1d:3a:e3:50:ac:8b:b9:47:6d:88:ae:46:85:93:
                    5c:d6:36:bc:83:19:9e:5d:c9:79:f0:20:39:cd:48:
                    55:9d:b8:79:a1:f6:9e:70:74:4c:4f:f7:a0:ba:79:
                    1b:af:d0:7f:dc:f9:22:69:5d:70:cb:20:90:8e:62:
                    f8:88:bb:4d:e3:c2:21:84:13:8d:40:b6:aa:5c:25:
                    6c:66:63:82:14:60:1a:0f:94:5d:cb:fa:b0:d3:b2:
                    12:5a:82:dd:fd:c3:19:1b:50:c3:8a:a6:97:c8:b6:
                    4a:72:9f:79:72:a7:3a:1e:ca:d7:e5:52:20:55:e3:
                    c2:65:34:64:b4:75:c2:45:73:6b:2f:d5:de:fc:fc:
                    32:ac:eb:84:dd:2f:9a:02:be:35:27:d7:7e:ad:c5:
                    a6:bc:d8:2b:40:4e:37:6a:73:01:e3:ea:61:27:ef:
                    a9:b6:0c:58:1e:32:7f:e0:1d:9b:36:8c:d0:70:c6:
                    53:15:ff:c2:df:a4:72:68:60:3c:ac:a3:8c:cd:51:
                    e9:ab:d3:a9:fe:0e:41:f1:01:95:f1:3c:f3:6c:bf:
                    7d:ac:36:9a:8e:ad:07:00:29:03:e8:a3:f8:b7:16:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D4:42:41:96:FD:30:7C:19:1C:46:85:92:BA:EC:0E:0D:D5:62:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6097d637-bde8-38cd-863e-9ce39a5e09c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9d:92:22:14:39:d3:d5:63:a5:7a:92:d8:14:b8:d8:2f:bf:
         11:0f:9d:92:85:7a:e1:e1:a4:7e:5b:22:3f:ea:e5:7d:74:0a:
         ee:e7:a1:82:aa:68:41:be:6e:f9:a0:ee:f4:3d:c0:44:84:d1:
         90:f1:f6:f4:54:51:f1:7c:55:4c:2a:00:81:2f:f3:40:39:af:
         36:b9:df:98:b6:52:36:e4:ac:ae:d6:ea:9e:31:13:fd:61:b8:
         b6:bb:d7:c9:96:c9:d5:b1:3c:dd:a1:11:20:87:61:6d:04:b6:
         22:28:01:7d:35:6f:40:5d:9e:f7:16:b2:a4:2b:27:19:32:b3:
         6d:78:f3:00:e3:2d:ff:b3:56:fc:db:27:de:e5:d5:56:00:50:
         39:ae:72:a2:24:2f:24:a8:9a:65:77:ec:f0:cb:42:20:7c:93:
         e4:83:11:3d:4f:34:41:ba:c7:2e:ab:ce:25:8d:3a:72:61:1f:
         6e:40:76:a5:f6:2e:e4:3c:85:dd:ae:a5:fc:90:11:be:81:7f:
         11:76:45:a8:c7:fb:2d:1d:94:6c:af:58:d0:50:a1:71:62:58:
         35:20:21:1e:4d:6d:b3:2e:9b:da:9a:82:fe:74:26:48:90:c4:
         07:61:a8:ad:83:12:de:d5:a8:24:8f:7f:7b:60:9a:69:45:f5:
         7e:34:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:59 2025 by rpki-client