Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa
File:                     0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa (raw, json)
Hash identifier:          Mr3F9iWUGSa82eVyJ5nQHXLJZzxI0GjrNwEk/wtMl78=
Subject key identifier:   37:56:1F:0A:B6:C6:4B:34:C0:18:7C:94:B4:45:9A:F2:17:19:67:C5
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584A18954495EE98A51D3A6758C0
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     26057
IP address blocks:        168.238.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:44:95:ee:98:a5:1d:3a:67:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=26e72a7f-4c22-44a6-9a75-ccacacbe2356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:61:85:7e:53:0b:47:61:50:51:5a:73:f4:
                    e1:7d:9d:db:00:bf:08:e0:d8:e8:89:e5:d1:c5:bc:
                    46:ea:17:93:43:16:d3:6f:8e:b7:7d:fd:7c:21:64:
                    4e:87:e2:67:be:08:04:7d:96:12:69:b2:1b:57:9f:
                    4e:fd:ef:47:84:ec:18:54:17:48:4c:e1:6c:a6:2b:
                    e8:21:1c:be:bc:fd:4c:94:a0:78:e3:ee:99:c5:02:
                    ff:80:ea:06:4a:42:ef:47:6f:8f:3c:a2:72:24:fa:
                    b9:44:3f:11:be:78:1e:5d:3e:82:76:f1:3c:5a:35:
                    8d:af:09:b3:89:ad:95:06:f6:b1:34:10:dd:00:2b:
                    e5:32:97:48:03:b4:31:07:6c:0c:3d:09:23:de:40:
                    39:e4:49:df:46:04:be:54:0f:f6:f6:a7:48:8f:8d:
                    19:a2:16:02:46:2c:93:68:e5:f0:8a:bb:ea:23:a8:
                    92:9e:04:45:ca:15:e7:c0:b4:64:ba:db:57:58:03:
                    18:90:01:19:5e:49:02:73:f4:05:48:87:52:3c:e1:
                    58:40:6c:4d:37:4e:1f:56:8a:ee:17:4a:1a:e0:76:
                    fa:6e:3d:9f:fa:c3:63:40:7f:7a:d0:6c:8f:0d:a6:
                    1c:9f:17:81:de:96:a6:15:4e:3e:92:55:16:9d:9b:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:1F:0A:B6:C6:4B:34:C0:18:7C:94:B4:45:9A:F2:17:19:67:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/0cec7da6-a705-3b88-a2b7-aceb9de763f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:51:7c:df:3d:6c:50:10:22:4a:24:1f:12:ea:c2:70:15:4b:
         c3:a7:28:c0:16:45:02:1e:01:1a:63:c4:fe:80:84:a0:63:01:
         85:ba:1f:c0:af:5a:28:52:22:fc:69:66:09:55:79:95:f6:2b:
         b9:e6:45:7c:a7:b0:78:4d:fd:27:09:39:e0:d3:41:a0:f5:fe:
         58:92:b6:d9:88:a9:3a:45:5c:84:de:ea:d2:89:3f:c6:fb:8d:
         e3:d8:69:de:19:ef:bc:e2:d3:b6:6c:21:df:10:e4:9e:61:e7:
         db:c5:36:d2:0a:ea:b4:f2:6a:bd:dd:01:e9:01:32:e8:e6:9c:
         45:7d:22:5c:fb:bb:de:ce:15:fd:58:23:9b:ad:5b:b8:fc:8e:
         36:39:5a:85:aa:34:8e:b9:31:6a:6d:08:4c:f7:8a:d3:57:07:
         00:ab:4a:4d:c5:b4:13:38:7f:5c:a6:b6:ac:f4:63:cc:47:8d:
         f5:96:88:04:73:3f:4c:d2:23:e1:4d:63:e2:81:53:c4:cc:84:
         f3:12:42:4a:9b:0b:54:36:8c:3a:39:cd:36:11:96:87:00:03:
         03:95:01:1e:2e:45:93:73:9c:e5:36:d7:00:f9:89:3c:a3:08:
         95:34:ff:1a:de:88:66:78:9a:f2:70:25:05:78:a7:0f:47:59:
         e6:36:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:45 2025 by rpki-client