Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/58456863-1f05-3691-9eb4-8c91a4ff195c.roa
File:                     58456863-1f05-3691-9eb4-8c91a4ff195c.roa (raw, json)
Hash identifier:          XaGEWW4uNi+nYuykbKAwKXWzw1BrcGkyqo03FeJ/KkI=
Subject key identifier:   F3:FE:1C:5B:A8:52:FE:71:A3:B7:E1:34:DF:AD:A3:3D:37:0F:28:C1
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584B0E414CDAFAEB827E120C2E00
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/58456863-1f05-3691-9eb4-8c91a4ff195c.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     18434
IP address blocks:        156.55.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:4c:da:fa:eb:82:7e:12:0c:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=c71c9470-c045-4f18-a31e-5fb52f167264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:2e:2a:56:9b:08:6c:65:19:90:fd:12:25:
                    39:df:0a:69:e1:2c:e1:47:22:e6:cb:76:40:7b:7d:
                    d6:bc:59:14:dc:ff:b6:6c:5e:e9:fd:35:37:5b:8e:
                    7c:72:9b:37:b0:a5:64:2e:d5:a3:48:78:0c:de:7e:
                    23:6e:11:e1:a4:c8:20:68:4c:01:d4:26:c8:f2:62:
                    ce:17:de:1e:50:6c:91:d8:44:13:29:68:c6:5e:4b:
                    18:ec:de:17:df:6c:d2:54:45:6c:87:ee:c5:8e:b7:
                    c0:b8:45:7d:83:69:6d:1e:1a:e5:1c:99:85:86:00:
                    f0:8f:4c:9a:96:a0:59:75:1b:77:f3:0a:d5:53:9c:
                    ee:b2:67:4e:67:0b:80:f4:1f:a6:9d:b2:bd:a7:a3:
                    25:a8:ff:a2:87:ea:ca:6a:09:99:64:0a:e0:b6:52:
                    37:fa:16:f0:85:e4:ed:d5:05:98:33:e1:3f:71:40:
                    07:12:9c:98:7d:69:4d:20:12:54:66:98:50:eb:20:
                    e7:f4:37:56:cd:bd:96:82:22:b3:24:8b:af:33:90:
                    a9:ab:9d:aa:90:a2:05:b0:97:e0:86:72:12:fc:5e:
                    5f:fc:15:db:2c:a7:7e:cf:7e:dc:38:56:f0:7b:bd:
                    bd:fc:2b:61:b4:3d:a9:56:d3:a4:f0:21:5d:5f:72:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:1C:5B:A8:52:FE:71:A3:B7:E1:34:DF:AD:A3:3D:37:0F:28:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/58456863-1f05-3691-9eb4-8c91a4ff195c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:24:78:70:7c:ed:04:c6:c2:5e:52:0a:30:4b:1c:09:4a:91:
         cc:73:8a:23:fa:a2:51:46:34:56:28:2a:66:28:cd:67:5c:9a:
         8b:46:90:a4:23:f4:e1:53:9c:e8:6e:fa:b2:32:7f:42:a3:a4:
         f2:7f:a3:ba:2d:0e:de:8d:c8:30:c0:e6:ba:b4:40:79:99:2c:
         48:6c:cd:a1:29:ce:1d:5d:ad:ca:30:33:73:e9:a4:7d:d4:34:
         ab:a1:1d:11:0a:6e:93:8e:28:e6:23:3b:d7:35:b2:f9:dd:58:
         4b:3e:cf:bb:cc:09:9b:cd:2e:a3:fa:a0:20:34:c5:8f:d6:32:
         b9:2b:11:be:22:33:95:15:71:f7:6e:b5:da:23:dc:d9:b6:0c:
         91:99:86:6d:89:5e:96:4a:3d:ba:1e:80:e2:27:4b:68:c1:eb:
         2d:fb:22:44:e4:0a:04:37:20:d6:58:fc:a7:50:a7:38:1e:62:
         71:fa:25:fa:65:8b:cd:1c:af:5e:21:48:2e:48:68:1c:29:47:
         fc:09:e7:d4:a7:5a:60:77:63:b2:c0:f6:08:1b:ad:fc:26:d2:
         5b:5f:2b:93:c3:9d:bf:d2:74:92:22:64:d2:64:66:37:ef:55:
         12:bc:a5:96:52:eb:9b:81:5e:2a:68:68:70:5b:54:d3:c2:a5:
         35:2b:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:33:40 2025 by rpki-client