Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/1758c3c3-7628-3c17-ae73-3965b345861f.roa
File:                     1758c3c3-7628-3c17-ae73-3965b345861f.roa (raw, json)
Hash identifier:          o3zLN6vI/8HplMIF+yyY8jy3oBBcHHu/d39b3MQQEmA=
Subject key identifier:   4A:9D:E7:7E:C4:9B:36:4A:98:61:F9:12:D2:3C:F2:33:AC:48:3A:0B
Certificate issuer:       /CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
Certificate serial:       010D0C9F4328584B03169A61C85634E6CD7A0800
Authority key identifier: 65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/1758c3c3-7628-3c17-ae73-3965b345861f.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     2686
IP address blocks:        159.208.56.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:9a:61:c8:56:34:e6:cd:7a:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=792808c2-37e2-4f71-91be-551fa72d78d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:a2:4f:32:ad:1c:92:44:f5:ff:82:7d:40:
                    69:65:de:0e:87:69:f4:13:36:20:0e:89:90:70:73:
                    4f:29:7f:45:da:db:7d:72:87:25:b0:fc:fb:4d:ce:
                    b6:77:fe:ae:3a:cb:6b:08:fc:7d:3a:ae:fd:93:41:
                    0d:7b:8f:e2:91:3c:ce:5f:ea:5a:0d:13:4d:ba:46:
                    c5:38:da:ab:d6:50:4d:18:2d:99:f2:1b:61:f8:a0:
                    93:3a:66:a7:67:3c:d9:5c:4e:dd:5b:f6:58:4e:61:
                    11:9c:52:b7:87:b0:78:f0:67:aa:c4:10:d0:22:f6:
                    14:10:97:bd:8f:a8:34:d7:6d:3d:73:8c:ab:a6:01:
                    5f:88:ed:6c:61:84:f0:81:9a:72:d9:81:11:6b:9d:
                    3c:a0:a5:b9:b2:cf:42:59:e6:50:ea:31:16:08:79:
                    c8:74:95:d1:8a:df:13:c0:fe:2d:64:61:87:68:a0:
                    50:b6:e3:b8:0e:ec:89:21:45:0a:a3:b2:60:aa:d9:
                    5b:72:40:56:51:10:4c:2e:f9:98:59:7c:1c:53:21:
                    5e:5e:6e:df:03:9a:eb:ad:ad:77:27:30:ed:89:6d:
                    88:31:b1:8e:46:47:e7:84:33:d1:9d:f6:a2:28:e5:
                    7a:6a:3f:18:dd:4e:e4:36:b4:2c:08:61:30:bd:f6:
                    0c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:E7:7E:C4:9B:36:4A:98:61:F9:12:D2:3C:F2:33:AC:48:3A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/1758c3c3-7628-3c17-ae73-3965b345861f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl

            X509v3 Authority Key Identifier:
                keyid:65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.208.56.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:35:f9:30:fe:65:72:33:95:17:79:c0:24:01:0b:21:da:
         58:1d:e1:b5:cb:91:cf:21:f9:1d:41:7e:f3:aa:0f:58:4e:64:
         a7:a3:98:09:3d:cb:1f:9d:a4:81:dd:c5:c1:5f:30:18:30:ca:
         1a:34:3b:0e:9d:f0:4b:fb:80:42:02:f8:ad:8b:dd:f2:54:a0:
         94:9f:74:42:61:da:9d:bd:0e:93:01:34:52:08:3f:0a:32:b7:
         e4:cd:32:8c:22:a3:d6:89:2f:06:92:ab:bd:55:5e:b9:ef:e9:
         ed:a8:12:23:35:64:ed:c8:02:c0:c6:d7:ad:57:5c:e4:5c:e8:
         b6:81:27:6d:57:3e:41:6e:a0:78:cf:b4:1f:4b:ee:87:f2:46:
         3f:25:81:55:62:b6:b8:1b:e5:88:7f:5a:ea:40:90:d6:d4:11:
         cb:7d:80:04:96:18:ab:da:a8:a4:aa:6c:13:e2:7f:94:bc:ba:
         cf:10:85:d1:8c:f1:fd:b9:c9:ca:f4:c6:41:0f:46:49:62:d9:
         10:0a:f8:56:e2:cf:4b:6d:19:23:e5:f2:44:c9:26:0b:a1:a6:
         0c:f6:5a:72:60:2b:a5:4d:4a:59:7f:82:01:65:b1:b3:af:36:
         f5:db:9e:30:df:ab:1b:6d:bf:6f:3a:0c:ca:26:92:ee:a0:d0:
         cf:e1:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:22:07 2025 by rpki-client