Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a0495863-13dd-3664-99d8-75485d93c51b.roa
File:                     a0495863-13dd-3664-99d8-75485d93c51b.roa (raw, json)
Hash identifier:          87G0D6o1m10cOF1fgM3w0sLo/wmNT1vxpc7BExDJkUo=
Subject key identifier:   5C:B6:85:27:EF:73:16:60:DB:D5:0B:5A:D5:1C:19:65:96:88:59:1D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B1AD1AF1EE15313E8A6979100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a0495863-13dd-3664-99d8-75485d93c51b.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     54113
IP address blocks:        157.52.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:af:1e:e1:53:13:e8:a6:97:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=06440c54-11b2-41ac-b1fe-03f2a4c7ceb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:82:97:61:d0:fd:6e:c8:e1:09:33:e8:4d:
                    4b:b1:28:c2:2c:94:aa:36:e7:73:d3:02:2d:67:37:
                    59:af:93:8e:1e:7e:ec:16:23:9c:a5:5e:7c:aa:39:
                    eb:31:f5:62:31:05:f2:0b:08:6e:80:19:ec:b0:bd:
                    c7:cb:6a:57:a6:ad:b5:93:f8:dc:95:78:f1:03:59:
                    be:4a:3f:b8:cf:c5:4f:77:0c:a8:1c:33:90:88:f2:
                    b2:97:e3:ad:6d:86:a3:97:52:e9:3c:71:b5:87:31:
                    1b:d3:fb:f2:45:b9:fc:50:e0:1e:87:3f:ac:19:bf:
                    8c:57:53:a2:cb:67:3b:c9:ff:53:f0:3f:77:49:2c:
                    0e:6d:62:5e:d4:74:50:02:b3:dc:f0:18:38:8e:3b:
                    1e:32:92:14:e8:92:82:51:6f:8d:7a:2c:44:fb:82:
                    4e:e8:e0:c6:1e:63:c2:e2:93:a7:3a:74:24:f0:42:
                    86:01:08:bd:51:08:8d:5a:ed:62:36:91:2d:c2:83:
                    10:c9:d6:c3:e1:8c:53:98:06:7d:fd:d4:d3:ec:c0:
                    2f:06:81:d6:5e:26:31:4c:ab:11:2f:f2:36:c3:da:
                    6f:4b:4d:21:b3:e1:fe:2b:c5:5c:9e:cd:5e:48:2a:
                    a6:24:b8:79:a5:d2:9d:6c:ee:78:54:be:e0:49:fd:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:85:27:EF:73:16:60:DB:D5:0B:5A:D5:1C:19:65:96:88:59:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a0495863-13dd-3664-99d8-75485d93c51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:67:f3:29:83:bc:18:ea:34:5d:16:d2:d3:4a:9b:8b:8f:87:
         bc:20:6b:e4:5a:00:1a:bf:c1:2f:b4:d8:10:40:80:b3:d7:d3:
         74:e8:35:b2:90:c9:64:7e:17:1e:c0:2c:0c:b3:9e:8b:b7:5a:
         33:06:dd:4e:a7:d7:26:f2:54:e4:66:71:00:4a:e1:e3:49:0b:
         a0:be:93:0a:0e:b5:d0:d9:7b:95:81:be:30:2c:d0:fa:b1:f1:
         1b:c5:a7:8c:a4:75:c9:c6:4f:cb:d9:2b:72:75:d8:0c:d8:7b:
         95:68:5a:32:b8:b6:0c:18:da:16:38:44:6e:83:3e:17:89:b8:
         21:6e:d9:2e:b3:28:54:9d:b9:d0:d2:ed:34:25:80:4f:14:5d:
         c4:45:7d:70:81:d6:7d:b1:66:ae:e5:d9:a8:f8:fc:ae:59:57:
         ef:32:bf:b0:53:b1:5d:16:73:8d:4a:3f:58:e0:ab:4f:9c:8f:
         c5:8a:42:00:ab:4e:b2:ae:fd:ca:66:ce:4e:e0:83:03:a0:34:
         e7:7f:f0:49:34:93:91:23:b3:58:85:b7:4c:43:d8:21:08:3e:
         e7:90:0a:28:7f:64:71:64:74:82:63:35:3c:b5:0c:81:aa:74:
         3a:e4:cd:26:ea:f3:ef:ac:de:c2:40:dc:6d:bf:f6:1d:9e:73:
         34:ea:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:00 2025 by rpki-client