Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/717e5704-9549-34f9-9377-1b7c5a587322.roa
File:                     717e5704-9549-34f9-9377-1b7c5a587322.roa (raw, json)
Hash identifier:          En+UPNIk2EuRD57rY0NOcp2izwr2TU59g73dIFHisUQ=
Subject key identifier:   BE:EE:04:73:D6:A8:F7:50:23:79:4B:B0:98:29:D4:B2:91:72:BF:B9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A7FE08B947E2EADCDAD49AF1C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/717e5704-9549-34f9-9377-1b7c5a587322.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     855
IP address blocks:        99.192.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:8b:94:7e:2e:ad:cd:ad:49:af:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=277d1bdb-5182-4ffd-80f8-c98ce9dc0d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:62:af:3a:7c:d4:43:14:ff:e4:71:fa:ae:
                    bb:7e:f3:3d:9f:79:4f:f8:72:ad:3b:44:21:ce:43:
                    1d:f3:5b:9e:6a:84:38:a2:66:f0:39:42:d3:c8:e5:
                    0b:23:92:48:b1:d8:30:08:ca:a6:a5:fd:ff:d4:a7:
                    8d:61:04:dd:57:4b:75:62:1a:5c:d4:03:a9:84:9d:
                    75:e8:36:73:68:43:98:3b:c0:fc:92:19:25:99:13:
                    f6:7f:26:af:22:9c:e3:b6:72:da:2c:ba:07:4c:d2:
                    5d:4b:9a:f0:94:fd:6b:a9:8b:96:07:56:eb:c4:60:
                    35:d9:89:e2:a5:89:32:65:98:6f:42:76:62:41:2c:
                    dc:09:10:17:e7:35:60:be:c3:f8:1a:3b:0f:fd:bb:
                    f5:88:99:73:c9:4d:6a:30:ed:a8:b8:3f:fa:3a:eb:
                    8b:9f:6e:7c:3a:d8:dc:fa:cb:be:51:7a:9a:bc:7f:
                    6d:26:14:2c:c5:d3:db:96:73:95:a8:46:c2:7d:f6:
                    5f:19:04:c9:2f:1d:56:b8:66:6d:d7:c6:ae:58:b8:
                    4a:ea:7e:d3:89:07:bb:7e:63:45:eb:04:1e:69:1e:
                    ae:ac:fc:f6:4d:ab:2a:88:70:01:d4:55:e0:75:e8:
                    3b:03:9d:68:d9:e2:c3:12:e6:b8:47:e6:58:73:a2:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:04:73:D6:A8:F7:50:23:79:4B:B0:98:29:D4:B2:91:72:BF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/717e5704-9549-34f9-9377-1b7c5a587322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.192.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:ce:b3:52:d2:4b:f8:9f:41:ae:27:6b:87:43:1f:a0:7e:
         cb:fb:a6:4b:a6:d1:87:b2:51:b5:ab:6b:a7:44:8b:4a:68:bc:
         f5:f4:10:ec:8e:3e:ca:93:48:64:08:23:d4:00:93:c0:d6:74:
         1b:62:b6:6e:fd:4d:57:35:3b:66:aa:eb:1b:7d:80:73:c1:7d:
         96:fb:f5:91:9b:08:f0:d2:92:40:e4:4b:d0:e2:f4:e5:48:ea:
         3e:23:71:41:e9:4b:de:ac:83:dd:f9:74:3f:29:21:67:42:d1:
         eb:04:34:6b:59:b7:90:30:47:76:db:92:55:a9:58:1e:0d:b3:
         b9:87:73:88:1b:01:2d:ce:83:84:f0:f8:30:00:7d:95:48:8a:
         4a:6f:ca:e8:f5:7c:3d:2e:4c:e0:b0:51:c3:09:6a:fa:e7:ab:
         27:f1:f8:a9:67:e2:87:b6:d5:d9:22:50:0f:e9:15:b1:92:2b:
         4e:7b:18:c0:88:e4:aa:3f:de:00:05:65:f9:13:6d:20:fc:1c:
         c1:a1:63:b8:44:c2:99:cf:2b:96:88:10:a1:e5:99:09:e2:d2:
         42:e8:36:f3:9c:c2:fd:db:83:56:76:e4:3c:3c:86:bc:ce:08:
         92:e1:c1:f4:ee:6a:31:d2:97:75:9e:f3:34:70:6d:26:b5:e4:
         64:ae:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:59 2025 by rpki-client