Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a18d9f9-3d0a-331d-97b2-7929ae7c4ed7.roa
File:                     2a18d9f9-3d0a-331d-97b2-7929ae7c4ed7.roa (raw, json)
Hash identifier:          CXsyoudVc9VZDRaGGwkVDhBK+7gKTt+QY+2DTGxxfLk=
Subject key identifier:   A2:59:8E:8D:AB:C2:36:38:B1:5D:30:F6:FF:FA:DD:C9:FD:F0:61:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16AD2265AE94CFEFA3C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a18d9f9-3d0a-331d-97b2-7929ae7c4ed7.roa
Signing time:             Thu 12 Jun 2025 12:42:11 +0000
ROA not before:           Thu 12 Jun 2025 12:42:11 +0000
ROA not after:            Wed 10 Sep 2025 12:42:11 +0000
asID:                     36622
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:6a:d2:26:5a:e9:4c:fe:fa:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:11 2025 GMT
            Not After : Sep 10 12:42:11 2025 GMT
        Subject: CN=2e0d6e55-7b8d-46a0-a683-1c8357fc3eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:7f:8f:08:af:8b:26:ee:fd:f4:c6:ae:54:
                    5b:cb:eb:15:eb:4b:65:ff:d4:00:e8:3a:8b:13:71:
                    df:ad:cc:b5:92:02:73:e1:80:2d:ea:da:7c:97:52:
                    ec:f2:ec:7b:9c:0f:74:d0:0a:fd:1b:44:df:66:0d:
                    3c:51:d4:3c:e7:df:ed:82:53:6b:0c:8c:d4:87:eb:
                    9e:49:38:a3:b8:2b:7a:af:92:bd:07:66:94:38:9d:
                    65:d1:b8:d6:58:57:6c:51:06:41:2c:bf:cc:24:f5:
                    9e:6d:7c:0f:6d:c2:5b:e4:cc:6d:a1:2b:25:cc:0b:
                    53:b2:d7:75:73:b8:75:c8:24:80:3a:51:ea:8b:26:
                    fa:cf:df:de:99:c8:b9:e7:d1:6f:61:fd:ef:12:f9:
                    1e:30:65:22:3d:7f:42:dd:f9:22:f4:30:f3:ed:c1:
                    6f:6b:41:6e:f6:67:ac:15:0f:ee:30:e1:69:83:46:
                    80:ae:c4:f7:f1:cd:85:84:2b:9c:ec:d4:47:32:e4:
                    30:ef:42:ce:0b:28:c3:cb:f6:92:87:61:57:31:d5:
                    bb:3f:46:7c:21:3e:13:36:5d:3b:8e:9b:67:02:d5:
                    9d:4a:45:6e:5c:72:6e:61:40:a9:83:05:9b:66:12:
                    09:ce:71:e7:5c:e3:44:80:27:c4:69:50:83:7a:f9:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:8E:8D:AB:C2:36:38:B1:5D:30:F6:FF:FA:DD:C9:FD:F0:61:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a18d9f9-3d0a-331d-97b2-7929ae7c4ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:57:da:fa:7f:b3:1a:c6:6b:f3:7f:5f:50:69:9d:19:e9:8d:
         af:9b:14:4d:0d:4d:9f:55:dd:cd:2f:d2:8c:14:82:e2:f2:5e:
         f1:4d:b2:ba:28:50:d9:c8:83:2c:3c:b8:17:aa:93:f1:91:45:
         cc:aa:d9:76:82:3e:ff:49:18:07:28:75:b8:bb:31:ee:83:ec:
         dc:cc:01:a0:b7:00:c5:3d:7e:eb:83:7e:62:f5:2d:7a:c9:2e:
         37:3f:76:e0:7e:39:77:a0:e9:bd:2e:75:73:70:f4:bd:8b:52:
         8a:2d:0a:43:72:43:3c:09:98:d4:cb:d6:37:ee:22:61:58:a7:
         f6:2e:61:ad:e8:23:07:ca:8d:27:df:bc:1b:71:75:d6:1d:d4:
         0c:2b:12:f8:21:bb:53:3b:ae:3e:8f:d1:88:c0:5e:2b:0c:13:
         03:9e:7a:7c:74:3c:e7:d1:5b:7c:2e:36:6f:e3:19:cc:d1:24:
         da:af:57:9a:64:e5:f5:83:c8:f6:72:5b:77:5b:a6:e1:f4:bc:
         c5:a4:96:08:1e:97:f1:62:ba:12:68:e2:fb:66:58:6b:36:99:
         5c:e4:72:00:50:f7:08:91:d4:0b:92:e1:7d:27:01:3b:6f:8f:
         71:7e:b7:fb:c2:17:d0:86:e5:b1:a4:13:87:21:49:26:a1:43:
         af:1d:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:01:38 2025 by rpki-client