Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
File:                     9137315f-e06c-3852-8f0f-5067ab5e516a.roa (raw, json)
Hash identifier:          D0F13whXJe0d3/X4H2TEfHqZxxooNfFg9D1EwFFwz+4=
Subject key identifier:   EF:74:87:68:88:3B:14:2A:B9:21:9D:24:B7:85:01:4A:43:6E:A2:0C
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584A4DA0514AD04DC51D684501D0
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     174
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:51:4a:d0:4d:c5:1d:68:45:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=87ac4a79-bd14-43c9-97e9-a11e1d2e6809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:b6:49:82:5f:73:d1:5d:0e:3b:6e:4c:30:
                    01:68:0e:c7:0a:d4:2a:86:b5:06:54:6c:2a:dc:78:
                    5d:82:e1:72:75:25:93:7e:d9:ee:79:32:9f:10:4c:
                    bb:b3:3b:50:19:5f:b7:ee:37:39:79:0d:ae:0d:02:
                    dd:79:7e:0e:81:b2:62:14:e0:20:fd:83:20:0b:12:
                    d3:43:f0:ae:b6:38:e7:8f:74:d4:42:7b:cf:1a:19:
                    2b:d3:e4:6b:39:21:a5:d8:46:f8:9e:2b:fb:97:dc:
                    43:2a:99:de:48:16:74:2f:bc:86:fd:17:66:a7:ce:
                    2f:16:98:c8:bb:6a:82:7c:38:5e:7a:07:20:8a:35:
                    b8:2b:2f:f3:16:4b:0f:3e:e3:51:1f:19:bf:2e:bf:
                    80:0b:e1:65:a3:26:52:d8:cd:5c:92:5e:88:38:98:
                    69:c1:2d:d7:6e:ed:9f:e0:5d:aa:63:cd:38:4d:40:
                    f2:5d:8f:f6:c9:2e:54:31:bd:e6:6d:90:24:e0:20:
                    f3:9f:d1:b4:c7:ac:26:1b:a5:df:9b:bd:f4:19:16:
                    d5:91:10:87:e8:8a:ba:db:1d:6d:94:09:5f:1f:05:
                    e8:33:6c:46:17:05:22:f6:a8:3b:c3:d9:50:6d:b2:
                    af:95:4b:74:cc:1c:52:1f:8f:98:d3:e1:c1:d7:78:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:87:68:88:3B:14:2A:B9:21:9D:24:B7:85:01:4A:43:6E:A2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:09:48:88:02:17:5d:c6:10:37:fc:a2:92:2b:38:18:eb:
         5f:76:cf:23:a9:0f:9f:ac:c5:73:a0:d7:00:62:f7:6b:76:e5:
         47:77:43:8d:0d:39:44:15:35:2a:ab:d0:bb:6c:e9:2f:37:0e:
         c8:d1:03:54:93:f8:a5:94:f9:8f:26:df:b3:8e:fe:22:7d:a9:
         cd:74:63:3d:e0:a7:7c:39:77:78:db:3a:de:71:65:35:63:d0:
         d7:a8:d3:7e:13:f4:31:4a:f0:ae:52:e8:ac:a7:26:a0:9b:b0:
         e2:bd:1e:9e:73:1f:d7:77:2e:33:38:f2:e1:f1:f2:77:f4:56:
         6c:96:95:34:4b:01:05:17:7a:28:21:b6:9a:ce:7e:4c:bd:6c:
         a5:53:28:ee:35:3a:29:c5:ef:2c:6a:50:ae:0d:8b:0f:e2:9c:
         c7:90:d2:1a:93:6b:6d:ce:fe:15:68:b5:fd:48:67:8c:7c:57:
         1b:8f:4b:07:87:0a:ce:7d:a4:d3:01:56:40:56:bc:6d:17:f1:
         30:dd:9b:57:7f:f6:99:d0:ba:5c:a4:30:4e:8f:63:1f:bc:2d:
         55:23:59:fc:0c:06:45:58:13:1e:15:cf:46:dd:14:90:3d:a4:
         d2:31:6a:ed:8d:42:58:01:93:74:e2:b3:08:93:59:3c:9d:7c:
         8d:10:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:22:07 2025 by rpki-client