Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
File:                     90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa (raw, json)
Hash identifier:          h7wndJ2oAAB5PqWP2lqx5OoBOTdsemQmlLLhWWDocXw=
Subject key identifier:   D3:0B:8D:86:B2:E4:92:71:EA:23:28:79:73:B9:FD:F9:00:74:63:92
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584ACCA65370F272958D66EBA300
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     400989
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:53:70:f2:72:95:8d:66:eb:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=1de1c1ff-9d27-4d46-84d9-4c4983ecf665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:b9:55:7f:50:4e:e2:68:f4:5d:09:3d:41:
                    28:2b:73:89:8b:a7:16:d0:c9:81:c4:db:54:ef:00:
                    b1:0a:99:76:24:b1:d1:5c:d9:6f:a0:44:e1:7f:8e:
                    07:d1:ff:51:a7:5e:57:cb:bd:04:cc:a2:80:99:44:
                    62:0e:c9:40:13:38:96:b8:2b:b7:71:38:4d:37:44:
                    e8:39:3c:54:0f:34:4a:d2:cc:eb:2b:60:04:1a:1f:
                    8e:f7:dd:66:9d:e1:9d:4d:07:75:65:54:5a:8a:c2:
                    3c:d0:66:fc:5a:ae:cd:05:46:0c:18:61:06:c0:20:
                    6e:9e:5e:3a:a4:86:f1:3d:ed:49:11:ec:4b:32:09:
                    c5:c5:a0:38:57:2a:cf:7b:3f:3b:39:90:c1:84:5c:
                    a8:dd:fa:a6:99:35:8d:d2:66:01:c3:9b:1e:4a:00:
                    d1:45:0f:26:f4:44:1d:3e:23:df:36:27:97:8a:89:
                    e1:c7:d1:a4:30:d6:21:d1:1d:8e:03:5d:9e:3a:a0:
                    e4:2f:d4:88:1b:67:7d:cc:d8:5f:0a:08:d8:13:ac:
                    01:d6:a5:0b:ab:34:c9:1d:29:b9:e0:c2:88:79:83:
                    17:d4:09:8a:d7:b6:d8:88:bb:38:cc:8b:46:63:c1:
                    5f:80:12:5f:2a:31:4a:d0:5c:35:ff:cd:33:9a:9a:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0B:8D:86:B2:E4:92:71:EA:23:28:79:73:B9:FD:F9:00:74:63:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:33:d5:69:36:08:59:73:3b:2b:b0:80:16:eb:52:3c:c0:a6:
         9a:ad:ce:e0:b9:ec:d9:5a:72:89:04:ad:d8:30:9d:4d:08:c1:
         5f:87:a5:bd:db:2e:00:5e:75:c8:83:94:3b:17:bf:e2:4b:e9:
         5d:a9:bb:67:bc:f1:9c:9d:e7:e0:04:a8:ce:5e:08:ff:89:6a:
         98:84:be:00:36:ce:b1:63:1f:19:6b:fb:75:0a:0d:81:31:47:
         59:23:d5:67:d9:e5:26:2c:7a:dc:1b:c4:c1:72:92:be:7b:f6:
         41:f1:fd:08:14:19:e2:60:78:8d:98:04:94:d2:22:20:44:43:
         c8:a0:91:66:46:ec:90:63:e6:e2:99:e3:0e:b3:80:c8:da:ec:
         bc:4f:c1:f3:4a:02:b9:b3:30:8c:1f:c4:02:c6:80:7a:80:3f:
         e0:42:a5:62:d5:0d:4c:8b:64:32:c2:cc:5c:68:f1:fb:08:d0:
         4b:cf:78:48:96:43:ea:62:2d:64:fc:d1:df:98:f1:67:38:d9:
         e6:c4:c3:17:a4:45:86:fe:7c:0d:76:96:ce:8d:78:58:19:33:
         76:3c:7b:11:8f:4b:a0:16:7a:54:4d:a2:c4:1c:98:5c:d2:1c:
         bc:05:14:f6:88:c0:bd:c7:8d:a6:45:8f:b7:cb:9c:a8:aa:ca:
         0d:6e:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:51:24 2025 by rpki-client