Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53f16818-8da7-34d0-a1c7-56afce1aed3b.roa
File:                     53f16818-8da7-34d0-a1c7-56afce1aed3b.roa (raw, json)
Hash identifier:          Z42Zgjf4COqKl02aUo3gyR5hKIAVy/0Uiw1zuYbQ5cI=
Subject key identifier:   3C:F3:84:CF:B1:76:5F:F3:0E:93:73:99:27:E0:FA:86:4A:02:8E:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB1641DD2A7192C71D29EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53f16818-8da7-34d0-a1c7-56afce1aed3b.roa
Signing time:             Thu 12 Jun 2025 12:42:08 +0000
ROA not before:           Thu 12 Jun 2025 12:42:08 +0000
ROA not after:            Wed 10 Sep 2025 12:42:08 +0000
asID:                     396545
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:64:1d:d2:a7:19:2c:71:d2:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:08 2025 GMT
            Not After : Sep 10 12:42:08 2025 GMT
        Subject: CN=9ccdc771-ddb5-49c7-b500-4b3907cd8cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:d1:c7:21:f6:80:9c:2d:8d:8e:cd:b9:53:
                    a1:fe:e2:94:6a:9b:da:b1:8f:94:c7:f2:ef:cd:7e:
                    25:42:37:de:89:bb:49:24:fb:45:97:66:17:2b:3e:
                    e7:30:7c:79:7d:84:39:57:00:a0:6e:dd:10:95:30:
                    11:59:16:1e:82:d5:b9:56:23:5b:0b:54:1e:23:17:
                    6e:53:9f:96:13:ff:6d:eb:ee:86:a0:30:bc:1a:6f:
                    f8:7e:fc:2d:54:7e:19:90:38:f9:ba:ee:4a:b5:dc:
                    87:0b:4d:ea:be:12:81:e7:bc:8d:d5:7c:58:cc:1e:
                    ef:32:41:9b:bf:fc:6a:f4:14:8d:13:be:34:f8:24:
                    c4:9d:c1:a1:39:3f:1c:89:fd:ad:9c:b2:80:d2:9b:
                    47:5a:41:1a:b9:43:42:41:5e:cb:86:49:e9:0a:e1:
                    fe:6a:dc:1e:ff:db:90:20:5b:95:2b:cc:f2:40:d9:
                    de:90:dc:a9:02:9d:80:28:4a:19:f6:d4:18:95:b0:
                    df:e7:69:bb:37:b0:f2:a9:73:4d:97:6d:f9:db:b3:
                    a2:9a:a6:a9:89:ea:8b:68:4b:f3:66:be:bb:a9:c0:
                    ac:74:48:99:63:d4:c6:ff:6e:21:fb:23:25:5b:2a:
                    11:a9:15:62:95:80:6a:34:41:34:65:f2:dc:fb:b2:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F3:84:CF:B1:76:5F:F3:0E:93:73:99:27:E0:FA:86:4A:02:8E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53f16818-8da7-34d0-a1c7-56afce1aed3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:2d:57:40:6a:e4:e0:71:65:b5:b4:37:eb:b4:9d:03:84:
         76:28:bd:35:55:91:28:29:4e:6e:63:61:0d:b8:69:88:43:16:
         7e:20:6b:8d:54:50:1d:78:71:72:9f:cc:18:4b:60:ce:13:0e:
         fd:f0:9f:49:d9:98:47:c8:43:c9:0c:1d:05:39:94:eb:f5:0f:
         73:04:47:4a:c4:57:02:38:42:63:28:be:3e:c4:06:de:2f:26:
         d1:84:06:b9:a2:6e:40:c6:1e:af:74:a2:b2:28:1d:ac:d7:6f:
         f7:6d:d6:c7:34:c0:ab:fe:a1:95:65:76:23:f1:b3:f3:dc:95:
         94:d7:79:d1:d0:29:9f:a9:e4:d2:7f:26:40:2e:4a:de:55:3c:
         5a:30:bc:93:99:7a:7d:fd:b3:3f:8e:26:c7:3c:51:2a:ca:b2:
         62:66:cf:b5:b3:86:2f:60:61:38:b7:da:81:d2:b5:39:07:82:
         b8:bc:c3:3a:60:7b:5e:88:dd:9e:e9:26:f6:ed:c5:33:60:50:
         44:51:82:cb:e7:9d:5f:b8:b6:36:5f:62:56:90:0d:2b:f6:e2:
         eb:e2:2c:64:02:ca:09:4f:5e:9b:8f:71:f4:c9:5c:33:40:ec:
         f4:21:6f:d6:9f:92:71:7d:d1:d8:11:0a:93:ed:be:49:9e:15:
         bd:54:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:42:06 2025 by rpki-client