Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a3df76-9d81-3014-8c83-859363a56681.roa
File:                     00a3df76-9d81-3014-8c83-859363a56681.roa (raw, json)
Hash identifier:          ZjTQDwk8wJno0fEdfjTPZqyuWDVygVRKhtFPvRsKH84=
Subject key identifier:   B4:68:A9:8A:F7:2A:99:51:97:F5:BC:C2:D0:33:46:64:64:89:35:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16313A2EEF5966DE5489C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a3df76-9d81-3014-8c83-859363a56681.roa
Signing time:             Thu 12 Jun 2025 12:42:08 +0000
ROA not before:           Thu 12 Jun 2025 12:42:08 +0000
ROA not after:            Wed 10 Sep 2025 12:42:08 +0000
asID:                     396606
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:63:13:a2:ee:f5:96:6d:e5:48:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:08 2025 GMT
            Not After : Sep 10 12:42:08 2025 GMT
        Subject: CN=7b22d424-5755-4779-9183-ce2360f48200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:b0:e9:5e:f8:9e:57:dc:e7:32:ba:3f:43:
                    03:d1:9d:31:6b:83:77:76:37:87:c9:a5:ca:fc:50:
                    0f:fd:02:39:77:f7:64:1e:8c:7e:6d:0c:87:fc:2b:
                    e6:12:66:18:20:09:6c:d5:a0:ea:57:d3:87:da:ad:
                    8b:c3:8c:c0:bc:89:28:e3:ad:16:c2:2f:90:52:19:
                    47:3e:cb:12:27:d3:84:bd:fc:b4:84:81:cc:12:27:
                    87:41:20:de:4c:a6:16:05:a4:d2:c3:67:48:58:9c:
                    8c:3a:cd:eb:07:88:8d:97:98:03:99:43:d5:e0:cc:
                    ca:02:08:59:40:44:19:64:df:30:28:60:19:f4:72:
                    87:e7:56:21:3a:45:fa:b2:cf:c5:6c:ec:c5:70:58:
                    7e:f3:c8:40:6d:e3:d3:42:eb:09:6d:49:3f:58:41:
                    49:3c:98:1c:04:f0:4f:c3:5e:81:52:07:96:0a:78:
                    51:28:3a:cb:54:8f:d8:8d:8e:8e:2f:be:88:9b:9e:
                    5f:27:ed:66:44:13:37:98:83:a5:3c:8f:d4:76:ec:
                    ed:05:9b:2e:a2:c1:40:cd:09:08:86:83:99:df:cd:
                    68:35:d2:e7:8f:c2:3d:31:74:66:90:27:7a:a1:0b:
                    a6:c2:1f:75:c3:95:9a:89:23:f4:68:29:a9:f5:48:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:68:A9:8A:F7:2A:99:51:97:F5:BC:C2:D0:33:46:64:64:89:35:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a3df76-9d81-3014-8c83-859363a56681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:10:94:9c:64:4f:67:b5:8d:93:16:9c:ff:c9:27:27:36:32:
         92:49:22:cc:6d:eb:11:06:1e:c5:31:64:6f:52:41:01:d5:30:
         a5:bc:94:d5:2e:22:da:a9:d7:c1:0a:6a:80:57:7d:34:e4:4c:
         a3:78:d9:4a:13:c7:fd:21:7f:fd:b5:79:90:be:96:c6:b7:2a:
         da:c9:24:59:c2:7f:49:36:df:2c:7a:7d:ef:94:67:15:8e:31:
         7f:d7:81:bb:e2:ab:ef:1b:ef:9b:5e:e0:a0:29:d3:0b:f3:da:
         6c:28:10:df:06:da:fd:de:61:b6:99:7a:57:4a:d4:9e:b1:f6:
         99:81:28:c6:78:37:27:34:cf:fd:96:04:c5:e8:9a:ec:31:d3:
         e8:20:ed:df:47:66:0f:87:55:98:e5:dd:ec:a4:d2:04:55:1b:
         ff:eb:8f:11:49:42:39:05:b3:1a:99:a5:08:ab:66:db:73:29:
         63:e5:99:56:b0:28:e4:12:c9:c6:d4:ee:d7:89:42:aa:c7:04:
         19:41:b3:2e:d1:73:3c:f8:da:57:74:ea:36:d5:77:57:79:3c:
         40:6a:e5:26:0d:5b:95:96:bb:ac:c3:28:f1:96:56:5f:2c:c7:
         d8:2d:c1:8c:d1:3c:06:ff:f2:5e:5e:9c:0b:e4:de:ac:c7:33:
         21:2b:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:59 2025 by rpki-client