Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/008313bc-028e-344a-a642-dc14ad919ad7.roa
File:                     008313bc-028e-344a-a642-dc14ad919ad7.roa (raw, json)
Hash identifier:          IyIc2fEeEGZWr7DgQeJzU5MX6BajVfjC7vxHJXj2j8M=
Subject key identifier:   DF:85:F0:AF:76:3A:CC:18:01:A0:DE:56:26:5A:58:B0:B4:ED:1F:DF
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584B1AD171BE1731EAFBFA4BA300
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/008313bc-028e-344a-a642-dc14ad919ad7.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        208.85.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:71:be:17:31:ea:fb:fa:4b:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=d5c63383-88f0-4092-b2eb-13da0f99e3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:b9:a4:cc:50:d7:46:54:69:ad:bc:25:c9:
                    8a:53:e1:41:d2:60:0c:51:ab:20:dd:76:ff:8a:83:
                    79:43:d8:d3:8a:b7:09:70:b4:ef:74:3d:27:65:91:
                    f1:87:a7:d2:5c:aa:a4:75:64:66:5f:99:f6:30:25:
                    9f:45:b1:d7:47:23:42:48:85:79:93:f9:98:dd:33:
                    47:6d:fa:27:5f:e9:6d:cc:fa:bf:27:4c:0e:92:9b:
                    92:d8:8e:71:46:99:42:98:9e:c8:06:bf:8f:2f:19:
                    f8:c9:2e:fb:24:8f:02:91:b3:4c:e4:95:61:5e:fc:
                    52:b2:c8:c8:69:2c:c0:64:1f:71:63:e1:29:82:b7:
                    02:10:b2:6a:dd:4f:07:56:fe:60:4b:cc:41:66:df:
                    fe:b6:4b:bb:5c:31:5f:63:48:ca:00:85:f6:4e:c8:
                    3c:d4:03:8b:f3:a3:c1:c0:c1:17:57:f1:05:20:6e:
                    05:65:7f:4d:22:74:f5:07:2b:3c:4f:0f:56:fc:47:
                    95:32:7d:fe:75:f6:ae:59:3a:4b:96:d1:00:16:bb:
                    33:86:50:65:7a:d8:a3:d9:25:4e:08:9d:1b:b7:c6:
                    e3:fe:f3:27:24:95:41:e1:69:43:cf:4f:ca:85:dc:
                    cd:af:19:6f:e1:b3:ff:76:34:e3:bf:a3:2c:f8:1e:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:F0:AF:76:3A:CC:18:01:A0:DE:56:26:5A:58:B0:B4:ED:1F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/008313bc-028e-344a-a642-dc14ad919ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:32:4e:5b:d3:30:82:57:30:6c:f4:0b:95:64:7b:7b:12:33:
         25:e4:a2:4d:d5:9e:75:47:a1:50:dd:f9:a6:bb:2f:69:39:24:
         62:b3:94:52:76:a7:65:ef:77:d6:9d:1d:e6:dd:5d:03:5c:bc:
         8a:4f:a5:cb:6b:ef:51:ee:07:99:ce:c6:b0:99:24:f9:b5:f4:
         5b:c0:60:31:6e:0d:39:3d:ff:82:97:f5:c2:e5:4b:47:44:fb:
         47:a3:32:fe:45:8e:9e:e9:3d:5e:b9:0b:3b:36:a6:7a:37:02:
         a4:73:1a:bd:70:0a:25:e6:17:89:6b:c5:e5:4b:ff:4b:bd:37:
         1e:53:04:55:2e:62:02:79:f5:90:03:33:5e:73:d5:cd:89:91:
         e9:4a:09:66:8d:ba:50:d5:0c:98:84:c1:42:f2:83:17:94:29:
         58:49:df:a2:81:f8:96:bf:ad:eb:cc:6b:88:32:a2:ce:91:8d:
         8d:f4:fc:91:4c:92:3c:61:01:cb:64:32:73:aa:31:22:15:bb:
         f5:2d:d2:a5:26:32:ca:0c:77:da:a8:da:e8:a5:d8:63:93:ea:
         69:87:b5:1a:4d:a9:1b:33:e1:0e:31:9c:91:41:99:51:6b:cf:
         4b:12:a4:c3:16:4d:35:ed:48:c7:61:2a:d5:78:07:18:f5:11:
         aa:21:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:28 2025 by rpki-client