Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa
File:                     5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa (raw, json)
Hash identifier:          GQC6a3PnO98CpYSuM7RjZcHp9meYWPkj3CDWc8HnQfw=
Subject key identifier:   54:26:04:F1:C9:9F:D5:F3:B6:C6:41:D9:A8:7C:C9:D6:12:B2:9A:6B
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AE6997930FB14C0E0FBAE4EE0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa
Signing time:             Mon 18 Aug 2025 20:05:55 +0000
ROA not before:           Mon 18 Aug 2025 20:05:55 +0000
ROA not after:            Sun 16 Nov 2025 21:05:55 +0000
asID:                     31898
IP address blocks:        150.230.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:99:79:30:fb:14:c0:e0:fb:ae:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 18 20:05:55 2025 GMT
            Not After : Nov 16 21:05:55 2025 GMT
        Subject: CN=771ed4f8-f769-409e-bde5-09e2cafdaaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:eb:8f:ec:d8:59:91:ec:81:cf:a3:5c:da:
                    7f:24:7b:7a:e4:b7:91:20:b5:a8:65:dd:df:5c:78:
                    85:ed:ee:e3:d0:c7:44:b5:ce:68:50:bf:fc:c8:ed:
                    cb:4b:48:45:2b:ca:c6:07:32:71:3a:95:ec:33:a8:
                    35:b1:00:4b:50:b1:79:e3:7c:c9:74:a5:1e:a3:26:
                    e9:53:12:6c:73:b5:34:ff:10:eb:6a:10:ab:68:75:
                    74:e9:a5:1a:8b:a6:94:a0:ba:c6:9f:7c:46:dc:03:
                    a7:af:04:9e:8f:85:2f:de:fd:cf:49:00:9c:ac:1d:
                    49:3b:c8:4d:4b:f7:c0:7e:62:61:fd:ae:f2:c7:06:
                    e7:a8:ed:0e:c9:87:4a:2f:cf:67:15:5a:21:7e:72:
                    9d:4c:08:08:68:3e:6c:26:3e:3c:28:5a:98:7c:bb:
                    7f:f9:b8:ef:1e:6d:77:3b:0b:8e:f4:ab:51:e7:b5:
                    e9:d3:68:a7:38:db:c8:4e:df:27:8a:c2:98:05:05:
                    1b:d5:75:4c:8f:69:de:cc:51:32:cf:8d:32:e9:47:
                    21:0b:be:a2:4c:b8:6a:04:4c:fb:4f:b9:67:43:4b:
                    a4:14:70:3b:72:96:15:8f:81:19:49:db:49:1b:fe:
                    33:04:90:d5:32:35:d3:ad:ad:dd:5a:61:95:ad:4e:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:04:F1:C9:9F:D5:F3:B6:C6:41:D9:A8:7C:C9:D6:12:B2:9A:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:04:70:7f:d8:ad:c8:54:06:fd:4d:3d:a4:af:64:70:90:04:
         83:d1:a4:e6:46:f0:b3:31:e6:e3:c5:52:4e:3f:cd:28:f0:d3:
         b8:f8:d6:e3:0c:eb:9b:0d:cb:4d:1a:69:91:9f:30:fc:23:13:
         73:e1:12:36:0d:a7:85:42:e5:38:53:fd:10:bb:85:09:2e:59:
         f9:97:7c:18:49:ff:43:b8:e2:c5:d6:a6:2e:b7:39:4a:ec:69:
         ef:1e:7a:bb:d1:a7:e2:c8:7d:37:e8:87:e3:cf:58:ed:77:0e:
         98:23:d5:61:71:b7:bb:90:eb:52:96:25:0b:91:ca:af:6a:e3:
         3d:17:b4:d0:c4:ca:22:3d:dc:dc:ed:58:51:c9:89:fd:8b:1b:
         d5:73:42:2b:38:17:11:cd:7d:dc:36:6f:ee:ec:42:6a:9a:85:
         c7:28:73:cc:5d:fa:8f:c3:25:a3:45:0e:d7:13:a5:f6:87:c4:
         db:fa:7c:f5:6e:be:72:4f:09:30:ae:00:77:ed:52:25:63:f8:
         d7:ce:90:be:e2:df:8f:38:d5:76:e5:27:98:77:b6:0f:db:7d:
         31:77:ba:98:1e:86:9c:a8:02:53:27:cc:05:27:f4:1d:c0:f0:
         7e:a4:83:ec:f5:d0:25:57:db:80:06:4e:16:c4:cd:6f:16:1a:
         4d:bd:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:11:22 2025 by rpki-client