Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa
File:                     0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa (raw, json)
Hash identifier:          MfTNl7rCQttdjZsSPd7Xa+6tZc/UdUXM6ANpDXl1Rfk=
Subject key identifier:   5A:02:54:CA:F5:94:F7:CB:DC:CC:ED:7C:43:8A:D1:CB:B9:92:CA:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D44FBFBCB8EA727FC980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     20431
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d4:4f:bf:bc:b8:ea:72:7f:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=dc5311a9-3a60-4a26-a596-35522164f402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:a6:89:51:d5:95:98:5e:c7:20:51:b2:0e:
                    9b:04:ba:d3:7a:08:31:4f:d5:ab:00:c8:63:d5:c6:
                    f4:1f:1d:f0:27:cc:b4:47:7b:ae:62:a8:37:9c:fe:
                    9a:c4:22:b2:83:f6:ae:e0:4c:e7:dc:41:1b:81:a7:
                    d5:96:57:77:b1:da:1a:6a:d8:5c:00:ab:06:0a:c9:
                    1a:c0:6b:eb:4d:b5:ee:21:55:a7:3e:7c:3d:ea:e2:
                    df:0e:d1:72:8e:a3:95:7d:17:63:9b:97:a2:c4:7c:
                    fe:0c:61:47:f5:df:05:9b:d3:15:96:0d:bd:8e:73:
                    b3:a2:c7:c0:36:6f:dc:50:d0:73:9c:0c:49:2e:1a:
                    c2:d1:6d:bd:09:9d:7b:d6:7a:35:d5:ed:c2:43:5a:
                    95:71:0f:52:15:99:50:12:3f:25:a5:90:8d:43:f6:
                    70:6e:81:4b:0e:8c:3a:a5:da:db:40:dd:7c:92:a5:
                    88:4a:fc:3b:74:17:34:47:71:a5:8c:51:e9:bd:85:
                    d4:2d:31:77:eb:22:e2:9a:e4:8e:d4:08:a2:d5:74:
                    70:5f:95:1f:a8:3a:c0:70:f1:bf:ca:dd:d9:95:a8:
                    37:5f:9a:c9:89:8e:2e:25:b4:88:2b:17:de:72:3d:
                    27:4d:b9:ca:d0:5f:f2:05:54:25:14:a1:0e:89:b9:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:02:54:CA:F5:94:F7:CB:DC:CC:ED:7C:43:8A:D1:CB:B9:92:CA:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:e8:67:f1:ec:26:85:3e:3c:d6:62:38:60:95:8d:24:06:
         bd:9c:9f:30:2a:71:1c:1a:15:a6:51:3e:83:17:10:b1:39:58:
         76:55:41:47:f2:04:1d:68:21:8a:7f:77:e3:bc:9a:62:8c:bf:
         28:1d:09:46:5b:88:45:2b:0a:b1:5f:74:0c:df:a9:2c:be:69:
         0c:1c:25:1f:d4:08:e5:81:0f:f6:a5:f4:15:e0:ec:ce:a4:3e:
         4a:02:8d:0d:71:ff:5b:bc:19:2d:78:f4:33:70:2e:39:1b:5e:
         91:8a:4f:30:eb:fd:0b:af:92:d4:bc:db:13:93:61:6e:06:df:
         6a:0c:29:33:82:07:bb:ec:66:3c:28:ba:30:fb:c8:09:b8:0c:
         34:3c:d9:ff:a0:3b:fe:32:e4:33:9a:3a:20:c7:8d:ba:72:c7:
         e4:8f:6a:80:90:6b:3d:f2:b5:70:04:88:d5:02:35:ae:49:f7:
         b9:3c:d8:39:40:a9:d6:b0:1f:d9:03:4c:95:f6:aa:24:e9:e3:
         fe:37:ba:b1:a2:83:73:d9:a5:24:ac:d1:02:ae:d3:42:36:c5:
         da:e2:e5:81:6c:e0:c9:4b:7e:76:c4:b2:26:e2:af:7f:33:7b:
         fe:33:64:3c:34:67:1a:eb:96:f4:c1:96:31:04:2d:a3:fe:d1:
         db:02:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:28 2025 by rpki-client