Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/9004c5be-7a62-3a8a-abcd-1719d35f46fe.roa
File:                     9004c5be-7a62-3a8a-abcd-1719d35f46fe.roa (raw, json)
Hash identifier:          fLyo7IpAmf9s2Eoc8HjOjDLGIgVKWIR9Zv/LIWX72yI=
Subject key identifier:   1B:B5:F4:B6:37:0F:FB:3A:97:9A:3E:B8:83:94:19:24:78:1B:5D:EA
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584B515FF09C179EA3FA78A3C780
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/9004c5be-7a62-3a8a-abcd-1719d35f46fe.roa
Signing time:             Fri 26 Sep 2025 02:01:29 +0000
ROA not before:           Fri 26 Sep 2025 02:01:29 +0000
ROA not after:            Thu 25 Dec 2025 03:01:29 +0000
asID:                     21507
IP address blocks:        153.80.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:5f:f0:9c:17:9e:a3:fa:78:a3:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Sep 26 02:01:29 2025 GMT
            Not After : Dec 25 03:01:29 2025 GMT
        Subject: CN=582d491f-d356-4a6f-afc0-f09c609a46ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:b6:45:ac:03:23:99:0f:3b:35:4a:e1:de:
                    47:62:7a:e4:23:85:4f:7e:d9:c0:b6:77:cb:bd:f8:
                    69:4a:09:1a:85:de:85:58:38:76:df:77:01:82:b8:
                    a3:2d:cb:c4:e2:89:41:e1:24:ac:36:fc:f1:bf:ed:
                    da:81:45:52:14:e6:be:4c:b1:b9:a7:54:14:bb:be:
                    c7:69:1c:b9:f9:f1:83:85:8a:9f:41:80:57:05:8c:
                    97:2e:e5:a8:ff:26:e4:7f:0e:9e:f2:cc:8a:0e:ff:
                    35:ea:06:4d:1f:15:06:55:f3:f2:c4:b4:7c:8f:4e:
                    32:65:30:62:54:47:04:f9:13:ee:b6:88:87:16:fd:
                    f2:32:5e:b3:b7:ff:8f:64:96:95:74:a9:3f:5a:0a:
                    c3:cc:95:a5:8b:47:ad:ff:d0:90:51:37:93:29:d2:
                    43:c8:5c:2e:f5:da:71:8c:80:0c:83:2d:60:17:3c:
                    2d:57:8f:3f:e3:7d:11:cd:4f:c6:5e:32:fd:f7:5a:
                    b8:27:cd:ec:75:68:f0:b7:b6:a4:06:9c:8e:2b:55:
                    fd:d9:ab:d4:8b:7f:fd:62:aa:ae:95:d1:ba:f7:39:
                    cb:0d:fa:22:e5:dd:70:bb:ac:e8:79:ed:f5:e8:6d:
                    1e:c1:16:24:5c:2a:86:8c:d2:de:84:09:59:b1:64:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:F4:B6:37:0F:FB:3A:97:9A:3E:B8:83:94:19:24:78:1B:5D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/9004c5be-7a62-3a8a-abcd-1719d35f46fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:92:10:ac:69:0c:93:bd:ce:0f:33:53:70:fe:bc:44:e6:
         b0:a5:af:41:ba:7f:d8:90:ff:76:45:22:bf:57:d9:a2:ef:2d:
         0e:2d:b7:64:dd:8c:a0:9b:84:95:42:a1:03:a3:fb:80:98:02:
         91:7e:75:f7:b4:7f:f8:85:b4:d4:fd:31:f5:f0:24:74:ad:05:
         94:52:4d:15:47:a2:e3:d5:11:88:31:99:20:75:19:9b:03:b0:
         f1:9c:27:d0:16:c0:f6:67:4e:21:40:24:1e:5b:f2:c2:72:bd:
         ce:d0:fc:4b:09:d4:18:68:2f:2c:a8:3f:48:2c:b3:c8:37:58:
         c1:a5:73:28:6e:30:49:00:ad:6c:16:b8:bc:99:39:2c:b7:4a:
         1e:3a:8d:1e:0d:09:57:9a:a7:1d:de:84:e6:30:b2:86:42:a1:
         04:e0:74:c6:4d:aa:53:61:41:c4:fa:a4:3f:35:4b:7a:9f:cd:
         fc:20:10:3e:5c:c6:87:76:0c:b3:d5:7f:34:7c:2e:8b:fc:32:
         e0:54:0d:4a:08:7b:83:0e:f9:36:a2:d8:f5:ed:1d:91:7b:69:
         30:4c:67:1e:f9:8e:dd:95:5a:44:7e:35:ca:30:75:74:55:10:
         0a:1d:1c:e8:78:be:04:8a:4e:e7:dc:30:e0:dd:2a:d5:1b:a4:
         05:54:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:08 2025 by rpki-client