Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54d5cd25-770f-3ef1-a022-1a037d512093.roa
File:                     54d5cd25-770f-3ef1-a022-1a037d512093.roa (raw, json)
Hash identifier:          xwfL2tMAB8zztiN0kN9cmRGz8vyvQl/NaflGLINbWVc=
Subject key identifier:   13:04:FB:F7:DC:56:98:FC:46:5D:AA:FC:65:87:77:2D:D0:E0:4C:4F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA0D2599D3EE2F3875ECE1AC8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54d5cd25-770f-3ef1-a022-1a037d512093.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        192.119.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:59:9d:3e:e2:f3:87:5e:ce:1a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=213f4a91-dd6f-4464-969d-6b5bb6a6f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:54:74:79:91:c6:99:42:f0:46:f9:7b:28:
                    3b:25:fe:10:21:62:e5:62:9b:16:e7:21:34:72:fc:
                    59:9f:60:df:8a:39:ef:4f:0d:10:fa:e1:ac:8b:b9:
                    e5:b5:d0:ac:6e:a0:14:ad:1f:1c:17:c8:e7:22:39:
                    2a:ed:26:48:e8:5c:32:62:e1:c4:14:a2:be:8e:38:
                    e1:0b:13:fc:b9:df:4b:fe:9c:13:6b:d5:79:6f:e8:
                    89:ad:f7:12:fd:10:f7:9b:84:b1:e3:e9:e0:8b:f2:
                    12:fd:9d:1c:06:07:c3:69:50:05:1f:91:21:e9:22:
                    9e:e4:d6:f9:9d:9f:fc:42:d2:dd:4f:6a:7f:cf:96:
                    a0:89:c2:ef:56:40:33:00:66:15:0a:d1:27:6f:db:
                    55:0d:a8:d9:21:e5:e2:06:c1:ca:cf:fe:77:d7:b9:
                    d7:16:43:60:e1:ec:46:48:5d:49:32:58:1f:0c:f1:
                    1f:d9:85:da:23:84:f7:ef:df:a6:b6:8b:f0:68:96:
                    d9:61:bb:b3:10:4c:65:48:68:c8:9b:46:3f:a6:1b:
                    7a:d3:25:df:af:4f:7e:95:3f:6a:42:5b:02:0a:a6:
                    ac:f5:d0:e1:1e:fa:66:ea:87:27:50:cc:3e:a5:42:
                    3f:ff:97:a2:3d:16:a6:e1:4c:02:e5:e3:a6:50:64:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:FB:F7:DC:56:98:FC:46:5D:AA:FC:65:87:77:2D:D0:E0:4C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54d5cd25-770f-3ef1-a022-1a037d512093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:60:30:61:66:fe:cf:05:2d:5a:77:aa:60:66:f5:ca:36:db:
         7c:b3:e2:cd:23:9b:90:82:51:44:cd:73:0b:b4:67:81:72:67:
         4a:2e:69:1d:f7:47:3b:49:4e:b6:fd:4c:16:92:88:6b:49:9a:
         bc:7a:1e:88:be:27:f1:25:aa:07:26:26:17:8b:0c:9d:44:0e:
         c0:51:51:34:49:a8:6d:87:8d:e6:4a:30:2b:95:4f:d0:7c:48:
         aa:1d:24:6a:e0:03:16:6a:64:f2:6c:4f:c4:42:4a:58:21:ae:
         8f:58:f6:0b:d0:bc:01:9f:0b:c9:b3:42:a8:db:54:a2:8a:37:
         73:ea:1b:1b:d5:57:46:a2:4e:6a:72:c1:03:32:b5:bd:18:bf:
         5b:11:72:30:12:0c:4b:34:42:87:60:2e:e5:42:bb:e1:d4:35:
         48:56:15:c3:cb:89:25:4d:ef:7d:ac:85:3c:90:04:76:f5:17:
         17:ef:fc:e0:9b:5b:e8:6c:1a:f6:e8:3d:08:82:27:4c:4b:53:
         9f:45:f6:62:0a:46:e4:e7:4d:42:10:41:ba:33:96:1f:9a:19:
         f1:f4:fd:80:5d:f2:9f:dd:1b:f8:bf:b9:af:9f:4b:1e:dc:e3:
         a9:15:f2:51:c7:5e:cc:f1:99:6c:6f:c9:00:dc:2e:42:f5:87:
         05:19:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:25:12 2025 by rpki-client