Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa
File:                     0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa (raw, json)
Hash identifier:          A4vbAwXbvx+OVzQJs0MKTA07G3QtSttLl9o9TCWDfzg=
Subject key identifier:   1D:93:B2:24:05:C5:8F:3D:F0:95:96:7D:E2:26:2A:49:26:82:84:59
Certificate issuer:       /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial:       010D0C9F4328584A7350A0275620D4BDD007EDE0
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        192.131.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a0:27:56:20:d4:bd:d0:07:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=29a4123f-214e-41e6-9550-f92ab4a74dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:50:21:50:c7:0a:1b:a2:0f:ca:ec:82:cd:
                    2d:7e:c3:6c:0a:ec:d9:bc:03:11:c1:4f:ba:d1:25:
                    81:0e:59:c5:8e:86:61:c6:29:4b:c7:61:b2:71:d2:
                    d8:f8:e5:89:d0:f4:6a:c5:94:1f:3b:c2:83:ba:72:
                    e6:62:66:4a:69:44:f8:28:3e:f4:2f:28:ef:d4:cd:
                    14:ca:a2:b8:9f:0e:15:f4:0b:83:6e:07:16:90:9f:
                    eb:11:81:f4:3d:9e:24:e2:6a:cf:b0:db:36:9d:81:
                    d4:a1:3a:0f:b0:78:3f:86:79:57:b1:a9:88:54:30:
                    ad:5d:25:21:8e:89:ec:7b:dc:14:ef:e8:37:7c:82:
                    b1:bb:e2:0d:27:81:0d:87:e3:94:83:52:e2:b0:dd:
                    11:40:9e:d2:d3:95:91:11:89:b2:26:4e:6e:8d:b1:
                    1c:a1:8e:20:92:0d:1c:c7:de:df:fd:ae:60:1f:f6:
                    9b:07:ac:61:fb:14:0e:f6:d3:cc:8d:fa:ac:22:da:
                    8f:31:1c:b5:68:1b:3d:23:59:af:69:ef:71:6e:fe:
                    34:da:86:0f:91:10:6a:f5:8e:6e:0a:4a:5c:ad:ac:
                    6b:0e:91:36:26:0b:32:2b:1f:22:a9:15:ae:fc:18:
                    21:73:3a:61:b1:96:5a:f3:0f:ae:27:c0:02:f4:59:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:93:B2:24:05:C5:8F:3D:F0:95:96:7D:E2:26:2A:49:26:82:84:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl

            X509v3 Authority Key Identifier:
                keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:e9:bc:b0:0a:66:42:af:55:9a:c0:b1:b1:7c:30:5e:68:
         43:f2:61:11:f1:97:ac:1d:31:0a:7d:d9:87:f0:9d:eb:af:0b:
         35:42:6d:51:e7:36:ed:91:f8:4b:1a:90:16:e4:b9:9d:3e:c0:
         af:58:a6:b5:0b:02:9c:48:3c:71:4f:25:17:da:3d:63:23:78:
         af:e3:64:68:f3:f9:ab:43:db:ef:64:fc:68:8d:ac:61:a0:cb:
         1c:7c:8f:b4:66:4c:62:84:09:c2:c4:cd:11:19:c8:9e:ff:2b:
         b2:c4:14:fe:86:0c:b8:3b:8c:b9:2a:d0:b6:6b:7a:b1:65:ba:
         da:d7:49:a8:a1:74:0f:1b:10:54:16:f4:77:01:25:84:ef:82:
         bf:f1:bd:48:79:c0:6b:01:47:d0:e5:db:bf:b8:fb:83:cd:9d:
         6f:68:ab:19:de:46:a3:6d:83:41:bf:86:46:de:78:61:62:9b:
         43:94:88:a2:f5:13:21:a1:83:5d:e5:c8:76:b8:7b:84:d8:99:
         41:28:bf:68:11:d9:ca:dd:cb:cc:28:86:16:5d:2e:1a:1e:7e:
         32:c4:21:ef:bb:67:ef:8e:ca:9d:af:6a:e0:d7:a7:46:c1:0b:
         d0:24:ea:d8:ec:74:63:4f:78:30:d1:35:ce:5c:23:e1:56:c6:
         cf:69:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:29:47 2025 by rpki-client