Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b88934d-903b-373a-812e-878620233eb9.roa
File:                     3b88934d-903b-373a-812e-878620233eb9.roa (raw, json)
Hash identifier:          lknnmcJ3E+liWqSnHtXFrkrWuQtUlu3xILDXVdpWPus=
Subject key identifier:   64:8E:12:11:2A:E3:54:1B:7C:A0:73:09:94:A6:D4:F1:55:BF:48:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F5F296786E2BA2839F38
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b88934d-903b-373a-812e-878620233eb9.roa
Signing time:             Tue 29 Jul 2025 12:32:54 +0000
ROA not before:           Tue 29 Jul 2025 12:32:54 +0000
ROA not after:            Mon 27 Oct 2025 12:32:54 +0000
asID:                     36623
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f5:f2:96:78:6e:2b:a2:83:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:54 2025 GMT
            Not After : Oct 27 12:32:54 2025 GMT
        Subject: CN=5f577596-ff36-445b-a127-617e5d05a6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:d0:37:7c:3a:12:d7:fb:d1:c3:e6:8f:0e:
                    46:0b:22:93:95:97:0b:38:3b:da:13:c7:cf:7d:e1:
                    e1:b9:05:cf:ab:12:6a:63:08:78:3c:c9:c1:aa:48:
                    36:db:93:31:a1:25:a5:d3:9f:67:06:d7:6c:04:d6:
                    e3:20:b0:e4:54:d3:95:ee:21:3e:64:04:36:72:ba:
                    23:15:5a:8a:a1:ae:ff:36:24:74:d3:27:43:a6:9b:
                    5c:e1:42:e0:25:37:0b:76:dd:e2:db:c4:b2:b8:fa:
                    08:b0:47:73:7e:2a:df:15:27:d3:4a:38:c2:c0:44:
                    31:09:9b:71:7f:89:8d:0c:a2:0c:f1:ef:c8:bd:70:
                    25:50:a1:f8:2b:d9:fd:62:fd:7d:ec:1d:e0:3f:66:
                    37:d5:3f:5d:2d:b9:99:d6:32:40:e4:75:40:d8:4a:
                    b6:f2:93:7a:27:61:96:da:ae:e6:c5:4f:7d:c6:99:
                    41:de:12:3a:0f:91:95:0f:c9:99:6c:eb:75:f8:a7:
                    f7:c4:7f:a8:3c:32:f2:ab:f8:9e:79:bc:d5:3f:2b:
                    1f:8a:93:e9:e2:ec:5b:aa:c0:50:ed:0e:8b:0f:2f:
                    18:0b:b5:68:b0:b9:83:ef:9d:29:5f:82:28:c3:e6:
                    43:ea:0f:0b:67:7a:e0:cc:ad:77:98:c2:f5:d6:75:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8E:12:11:2A:E3:54:1B:7C:A0:73:09:94:A6:D4:F1:55:BF:48:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b88934d-903b-373a-812e-878620233eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:83:4e:bd:96:72:30:6e:55:0d:fd:d0:92:66:2b:2f:39:
         c1:f1:b9:a0:02:e7:f2:cd:8c:c8:e0:c9:90:ad:a6:c6:94:bf:
         5c:0a:9c:b3:b2:dc:50:fb:b5:eb:d8:17:d2:8b:df:d2:11:58:
         fa:fb:2a:65:83:1f:27:1c:28:82:a8:72:8d:73:ab:be:b1:e9:
         e5:0a:02:71:b6:10:f6:ed:65:1d:39:f1:c1:d9:53:de:89:0f:
         55:b0:9e:80:65:22:cb:be:0b:3a:48:eb:1d:18:3b:85:2e:bf:
         99:21:cb:94:70:29:b2:86:d8:76:7a:18:eb:3d:cd:17:5a:94:
         21:ae:60:40:b1:e5:00:6e:4d:3b:75:0c:d9:c6:ad:5f:1f:20:
         af:29:d0:fb:47:b3:6e:3a:a0:d0:cb:da:14:16:af:94:dc:5f:
         89:09:b9:ee:a3:2a:1d:e4:36:8a:fd:93:49:66:b6:5b:bf:2b:
         94:2c:07:ba:ea:f9:81:d9:5b:1c:c1:c3:a7:c7:8f:1b:cb:0e:
         46:95:52:bb:cb:3f:2e:f9:b9:eb:fd:11:9a:a5:96:ff:e5:f5:
         ad:c2:8b:3c:f6:0e:47:6c:a1:dc:8a:08:4e:20:25:6c:7e:37:
         a1:99:1e:b1:b0:52:2c:38:23:c7:69:82:3d:84:01:78:36:93:
         ea:4c:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:30 2025 by rpki-client