Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45e0473b-6b5e-350d-8340-16e2a1b3dfc3.roa
File:                     45e0473b-6b5e-350d-8340-16e2a1b3dfc3.roa (raw, json)
Hash identifier:          beMCRiDjP1Y4u1DX/NsHsIDMrD1LAN+lPTUFYInpqfA=
Subject key identifier:   8D:7F:F3:89:5F:8A:F7:D9:DB:12:32:DC:DD:7C:87:86:9A:8A:5B:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D45F76F1AA2AC77C1D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45e0473b-6b5e-350d-8340-16e2a1b3dfc3.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     396589
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d4:5f:76:f1:aa:2a:c7:7c:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=da7fbbb8-e192-4afe-a75f-2f25234a7ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:ca:38:55:24:d0:b6:a7:43:c3:04:b9:f3:
                    b1:d5:8b:62:64:08:9f:6d:e1:6f:57:dd:98:7b:c0:
                    95:bb:fa:23:75:aa:a0:03:64:43:b9:15:ff:41:ef:
                    62:99:8e:b4:b4:52:80:2e:02:9c:5a:29:98:ae:ad:
                    46:44:a9:a6:40:92:64:4e:88:c0:5f:48:32:64:3d:
                    43:14:92:0e:ba:6f:d4:ce:dd:53:04:f9:6e:ee:50:
                    6f:ed:d5:87:c5:b7:49:ae:82:ed:d6:6e:e3:e6:f2:
                    78:8a:64:9e:cf:87:b1:fe:3d:4c:b8:1e:9a:32:be:
                    68:e1:eb:fe:f3:e2:b0:c6:58:3e:64:7b:fb:5b:5e:
                    86:ce:87:7a:81:75:37:85:78:3c:c6:dd:e5:0e:e9:
                    20:24:4e:bb:00:41:b0:d9:d5:e4:c7:da:93:14:65:
                    37:3e:75:86:a4:6c:b9:39:de:bd:7f:e6:96:f0:17:
                    c7:65:5e:59:13:8a:a7:5e:60:35:07:19:01:70:90:
                    08:15:69:4b:f3:5e:f5:aa:7c:15:34:6d:bb:80:ae:
                    1e:03:80:03:a4:e9:1d:3e:7a:5b:13:56:b1:3f:92:
                    49:4e:44:84:91:47:39:10:72:fc:81:06:a4:6f:29:
                    b7:03:78:d7:96:f7:4b:51:d3:ce:36:4d:7b:c8:62:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7F:F3:89:5F:8A:F7:D9:DB:12:32:DC:DD:7C:87:86:9A:8A:5B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45e0473b-6b5e-350d-8340-16e2a1b3dfc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:f3:53:cd:c1:37:52:1a:81:98:62:95:e1:82:9f:e4:4e:
         88:a2:b2:58:87:c1:01:58:ce:cb:be:0a:43:5d:27:bb:63:5c:
         4c:23:62:0f:4c:48:cd:94:7b:18:67:dd:41:8f:b3:57:fd:27:
         13:bb:a9:f7:f6:18:d1:59:b9:e9:a5:40:45:a6:6b:54:d2:4b:
         bc:a7:60:07:b5:2c:02:8e:2e:15:5c:d9:b6:75:03:4b:53:be:
         55:18:6c:b7:b9:ae:71:8c:89:d0:4a:28:99:a2:d9:2c:16:6a:
         32:0c:99:3d:44:d8:d6:be:ff:79:51:12:68:3f:45:d3:9c:f1:
         ee:b7:4d:b4:b8:8c:ad:ae:88:e6:b1:58:f6:e4:4d:93:8d:2d:
         fc:a4:c7:ec:f3:9c:b9:60:5f:57:61:be:e0:0d:27:49:6d:bd:
         49:fb:a2:da:c4:27:da:00:f2:e7:9b:16:16:8e:a0:17:a7:40:
         46:f4:94:ce:07:86:af:e9:04:22:9d:f9:5e:6c:e9:3d:74:c6:
         31:9b:21:1c:34:42:f2:b8:c7:39:c0:0b:b5:8e:7b:d9:37:57:
         7d:61:7b:f6:2d:45:0c:f3:fa:db:5d:bd:07:67:75:d3:53:21:
         4e:4b:f4:86:a5:80:ff:82:3b:ec:26:dc:f5:b1:47:fb:2c:4b:
         88:5e:56:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:38:44 2025 by rpki-client