Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa
File:                     ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa (raw, json)
Hash identifier:          VCcGR7DQoyFUW0raqabXefcBIwI3HS+SHVQtoydtIk4=
Subject key identifier:   F8:0F:79:5D:BD:72:22:36:6D:15:86:4C:9E:E5:72:BD:40:0E:80:03
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6ED08C998D2058E4DEE00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        157.52.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ed:08:c9:98:d2:05:8e:4d:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=f4cf9a55-cb6c-490a-a6ea-c456575aab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:f1:1f:b1:5b:10:ca:3d:2e:3b:b4:6e:13:
                    08:0a:0c:bc:79:a4:79:13:71:7f:59:48:b8:d9:c6:
                    f2:3d:81:66:2e:a3:1a:03:ce:bb:25:9b:4f:29:ce:
                    10:1a:bf:ba:52:9c:4a:79:4e:84:16:26:26:ad:6d:
                    43:1d:da:ba:6d:69:6d:aa:51:24:00:e2:79:8c:9d:
                    c8:f1:84:eb:88:8a:e5:fb:12:69:87:a0:11:43:31:
                    75:c6:77:c5:e5:8a:9e:d5:f7:53:c2:7d:37:8b:8e:
                    dd:44:e0:ac:30:51:c2:24:20:75:54:6b:f7:6c:06:
                    8d:22:f2:db:16:ff:35:6a:27:de:d8:20:34:1f:f4:
                    25:23:e1:be:a4:4a:9b:78:c7:5a:d5:ac:29:37:f9:
                    83:46:6e:3a:35:37:1e:42:8f:d7:89:99:78:e8:e7:
                    57:60:80:d3:ae:5b:72:76:86:da:33:fc:49:61:e7:
                    b0:5e:fb:97:6e:c7:d3:18:3b:e8:97:4e:2c:a6:da:
                    ba:cb:70:fd:a2:1e:cf:cc:a7:50:2d:f4:eb:11:a2:
                    5e:e8:53:bf:d5:cd:0f:b7:14:71:6e:63:85:de:8f:
                    45:8b:e0:55:15:de:e3:87:d7:a4:48:70:29:3f:48:
                    c0:c9:b8:69:3b:cd:7e:83:8a:b6:af:e4:6e:5d:d0:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:79:5D:BD:72:22:36:6D:15:86:4C:9E:E5:72:BD:40:0E:80:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:ad:f6:93:a9:75:8d:1e:60:79:ec:ac:b4:c2:2b:0f:8a:
         02:f8:1d:e0:b0:57:15:41:fc:2d:15:6a:39:63:d4:f2:07:59:
         66:af:7e:fa:84:83:a0:b5:a2:d2:0c:07:93:4e:1e:17:51:c4:
         a4:56:72:5b:96:ac:55:d3:3c:7b:45:40:df:db:06:de:ae:17:
         61:bc:bd:a0:0d:e8:43:77:45:a0:8f:25:0b:3b:e8:ca:a8:90:
         2d:46:ff:41:78:04:e6:bb:dc:74:af:ba:05:c5:75:e4:23:57:
         63:99:55:6c:78:c8:5f:73:f4:69:90:3f:eb:81:8e:91:49:6f:
         a7:b8:f4:dd:47:f4:65:99:9c:2d:9c:e3:76:91:89:6f:e9:da:
         f6:43:7d:57:52:09:96:e3:67:04:68:a9:d5:07:3d:a7:ea:d6:
         10:6f:e9:ea:3c:2e:0b:23:8c:27:1a:3d:93:23:4d:c5:eb:85:
         92:b9:ac:83:e0:59:96:6b:9f:58:e0:ac:8d:6d:73:f0:07:eb:
         c8:9b:ce:04:6c:27:b7:74:93:66:8e:0f:a9:50:48:77:44:02:
         c6:45:ad:30:89:36:a0:07:1b:ed:c9:a9:18:a4:d5:bb:c4:b9:
         3e:7c:be:04:1e:fe:2c:59:99:a9:d9:2c:82:f3:15:15:2f:57:
         0b:00:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:07 2025 by rpki-client