Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
File:                     8981f9f7-457a-3b83-995f-2557ffc8cb47.roa (raw, json)
Hash identifier:          JrLBWD+2ZmYfc7iEYQ7TnB48LM9iPZkKnFKrhsFCCx8=
Subject key identifier:   43:62:03:A8:CE:23:F3:AA:5A:40:3C:0C:60:12:AA:E4:7F:7D:F3:90
Certificate issuer:       /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial:       010D0C9F4328584AC710F1871516EFCF90410200
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     26461
IP address blocks:        208.91.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f1:87:15:16:ef:cf:90:41:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=1c462109-9f90-4228-aa4b-7928da906db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:8f:2d:0f:5f:fc:67:5e:bd:57:d1:a6:6a:
                    8e:84:3d:59:6f:e2:fc:11:a0:d4:f6:e2:11:42:6e:
                    be:71:62:e5:83:1f:20:a9:df:01:8f:90:58:68:f3:
                    32:95:fd:b5:41:0d:b6:14:b9:ac:f8:cc:02:f4:be:
                    e2:76:c7:76:81:5d:f4:49:19:87:d2:6c:14:4b:b1:
                    89:a7:9b:2e:e4:a7:a7:34:f3:c0:eb:f8:90:14:b1:
                    e5:83:d4:93:f6:d8:03:49:3e:2c:b2:e4:da:f0:f9:
                    e7:61:35:e2:ff:2a:40:4a:5e:41:68:8c:d2:90:4b:
                    50:23:b8:62:8c:cd:ab:1c:b1:ce:68:94:da:5d:73:
                    a4:4c:d8:b6:4f:66:69:32:d4:0d:11:db:77:45:61:
                    bf:62:1a:94:a4:8a:c0:f2:ee:1e:d8:5d:92:15:8e:
                    13:c6:98:94:50:35:31:0b:3e:f6:6f:61:f9:ff:94:
                    21:8b:56:78:4c:5a:ae:32:83:ce:fc:02:40:b7:a2:
                    51:85:95:ca:73:e9:e9:6c:71:2d:42:4b:2d:a4:cc:
                    ff:55:4d:50:97:23:7b:6a:54:b0:93:58:ae:18:1d:
                    85:f9:02:d8:c8:ca:6e:84:6c:03:9e:63:23:a4:c6:
                    d6:55:1e:40:dc:22:81:00:c6:b6:27:18:d9:18:b9:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:62:03:A8:CE:23:F3:AA:5A:40:3C:0C:60:12:AA:E4:7F:7D:F3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl

            X509v3 Authority Key Identifier:
                keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:4e:38:14:e3:7c:45:fb:94:1d:95:fd:f6:84:b4:1e:4a:
         72:d1:0d:db:e3:69:0b:90:aa:09:51:5f:97:1c:f7:25:75:0c:
         d9:60:c2:69:33:fd:b9:57:51:ac:fd:e4:b7:7e:7f:82:93:23:
         ec:b0:2f:32:1b:ec:eb:e4:03:42:5b:85:85:10:35:db:f4:d6:
         cf:18:48:2e:6e:9d:6e:94:0d:9d:2b:4c:52:06:49:e4:d4:68:
         dc:ee:d6:4a:c7:af:bf:1b:b6:db:52:1d:19:e7:4c:5f:b1:f0:
         dd:5b:6e:88:f0:73:ed:b1:3d:7e:34:71:89:1f:de:c2:30:87:
         ae:96:f6:c6:6a:2d:3e:e6:28:59:e8:5a:b2:68:cd:e3:94:53:
         d9:1d:a1:16:fe:40:32:76:17:35:0a:da:6f:63:fd:f1:d2:80:
         62:af:1b:cf:b4:30:90:cc:56:fd:05:f1:90:ac:e4:03:71:59:
         c4:5a:27:8f:cd:0a:40:a9:ab:a3:91:4c:fa:7c:5f:ab:4e:69:
         6f:c9:fc:00:a7:8e:2e:9c:3f:cd:5a:9c:0c:6a:76:80:4b:39:
         ed:ab:4f:80:51:fb:3c:30:02:15:f5:fd:bd:aa:27:82:47:40:
         f3:54:43:52:7c:ff:b8:92:23:fc:e4:28:11:5d:cd:c7:15:b6:
         27:de:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:51:28 2025 by rpki-client