Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa
File:                     9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa (raw, json)
Hash identifier:          g1biMa7drmlLXAn83oheEuyh1Dg7f4JReoUxpdxAjFE=
Subject key identifier:   52:8D:05:7F:8E:33:95:49:7E:F3:7D:F0:75:12:3F:15:E1:85:0E:A2
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F4328584A7A4B4CE13C485BBB72C316C0
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     16652
IP address blocks:        204.13.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4c:e1:3c:48:5b:bb:72:c3:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=51c30ee0-1b74-495f-aca5-d819576e8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:1d:da:76:53:73:4f:57:88:b4:fc:e6:e8:
                    4f:a6:fe:69:31:f0:4b:33:55:27:56:5d:9c:44:7a:
                    fc:3d:24:b6:87:b8:86:2a:90:ee:40:1f:40:d8:89:
                    0a:dc:7f:c8:c4:a8:a7:9c:ba:08:12:99:7b:15:4e:
                    74:28:c6:2e:9b:8e:54:b0:96:97:5c:37:5a:f2:12:
                    8f:31:cf:5d:a2:48:23:31:22:8e:08:e2:ad:eb:c8:
                    7c:42:a5:5d:04:5b:18:fd:d1:ec:fa:51:bb:2c:cc:
                    1d:5a:ff:82:4f:ac:78:94:9b:03:3e:1d:4f:7e:67:
                    72:cd:3d:4a:55:ba:61:dd:00:9b:dc:a9:52:0e:dc:
                    d7:76:26:57:33:a8:54:ed:cf:d2:b4:c0:0e:91:b1:
                    48:97:78:07:af:4f:1c:4b:59:be:c6:04:3b:fe:a6:
                    4c:eb:14:3f:56:d3:06:1b:77:c3:29:3b:ea:c9:41:
                    14:6c:f5:77:93:c9:76:60:a3:39:55:e5:78:4b:bb:
                    8b:83:f8:f1:30:4f:9b:9d:6e:c3:19:b9:64:e2:78:
                    40:94:9d:5d:8a:86:12:fd:c8:24:f7:66:66:29:66:
                    55:1a:7c:91:70:16:a9:9b:b6:f2:3d:61:60:2b:a0:
                    5e:20:bb:70:1b:5c:74:80:bc:57:79:53:e3:3c:f3:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:05:7F:8E:33:95:49:7E:F3:7D:F0:75:12:3F:15:E1:85:0E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:ee:ce:40:07:69:bb:18:67:05:24:07:f4:64:c3:22:90:
         94:95:72:cb:22:41:49:a9:6f:d2:75:72:92:df:f6:99:1f:61:
         7f:99:9f:a5:21:bb:bb:42:14:7b:bb:f9:5b:cd:9e:ef:1b:8d:
         97:e6:74:af:01:14:80:88:5f:1c:d1:63:e0:21:e6:55:b6:31:
         2f:63:34:6d:7d:3c:c6:7a:ee:61:62:26:ba:5b:d7:84:d3:d1:
         d8:0d:a2:00:17:26:49:36:05:a5:9a:c4:ef:8f:2b:44:fa:ea:
         f5:8b:63:b1:c1:a5:b1:4a:c3:ec:95:e7:95:86:a6:0f:54:55:
         6b:12:6d:d7:86:63:83:9e:f9:0d:06:70:c5:89:b2:47:a1:fc:
         6b:e5:63:90:93:91:aa:d1:c5:a2:98:d1:3c:25:c3:18:63:5e:
         f7:1e:29:a4:39:10:f8:3c:1a:8c:16:73:22:ef:20:1c:91:06:
         0f:ba:0b:b2:25:05:d9:10:61:06:ca:bd:52:04:4b:17:63:88:
         81:9c:a3:01:00:68:8b:3d:32:3a:cb:dd:3e:6f:7b:c4:74:83:
         fe:1e:de:1e:3d:c0:f9:ef:ef:da:30:54:6c:6b:3a:be:1f:3a:
         de:df:da:e8:35:88:d5:1d:62:bb:a0:5e:1b:3f:40:a3:4b:b6:
         11:67:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:42:29 2025 by rpki-client