Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a24bca9-b6f5-3017-88f8-4158ed0135b6.roa
File:                     5a24bca9-b6f5-3017-88f8-4158ed0135b6.roa (raw, json)
Hash identifier:          HkJ7papBr2tGX4cw4g/j9QaavFyfO7OuHw0RCrbWUh4=
Subject key identifier:   49:86:4A:FA:73:D6:E5:B1:02:84:17:F3:5A:5B:B9:35:66:D9:8D:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F33A8B33F55196113C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a24bca9-b6f5-3017-88f8-4158ed0135b6.roa
Signing time:             Tue 29 Jul 2025 12:32:53 +0000
ROA not before:           Tue 29 Jul 2025 12:32:53 +0000
ROA not after:            Mon 27 Oct 2025 12:32:53 +0000
asID:                     397199
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f3:3a:8b:33:f5:51:96:11:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:53 2025 GMT
            Not After : Oct 27 12:32:53 2025 GMT
        Subject: CN=cdb8b1ba-766a-4ebc-b0cc-97952516deda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:50:14:0c:eb:1a:63:08:84:f4:ce:84:a7:
                    73:3c:02:0a:e3:6f:43:b0:a3:ac:9d:a4:89:3b:c9:
                    9c:41:a6:08:be:c9:73:14:73:95:69:96:93:bf:e2:
                    ba:a8:36:94:54:22:d7:0d:01:eb:45:f0:44:58:37:
                    44:8b:18:17:d0:c9:36:36:62:d8:61:ac:54:07:f5:
                    2f:05:d7:51:50:56:0d:9b:83:a6:6f:13:bb:4f:92:
                    08:88:82:e9:89:d0:6c:91:9a:0c:e7:c8:4e:71:a9:
                    e8:14:2e:9c:8f:21:56:d9:e5:46:68:d3:c6:bc:76:
                    d5:ea:d6:ee:8e:82:29:36:8c:58:ea:15:7c:23:5a:
                    6a:c0:7e:e5:4c:3b:5d:b1:52:aa:54:d1:4d:02:40:
                    26:4d:3d:b2:5b:f9:7a:2c:52:df:b2:7b:62:23:4c:
                    54:88:c4:21:95:66:d7:10:c5:a7:c6:02:d6:9c:4c:
                    ec:42:de:6f:88:db:8c:a1:95:fc:6f:74:c9:f7:05:
                    64:f5:1e:ee:79:77:c9:0d:41:e9:62:e8:ff:6b:d4:
                    8d:13:db:b4:59:1b:5c:68:a7:f0:13:36:cd:32:f0:
                    90:2f:ae:84:8a:86:0d:9d:ec:27:cf:b6:46:86:06:
                    88:b9:02:61:aa:8c:a3:9f:cf:32:d2:ac:44:d0:d9:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:4A:FA:73:D6:E5:B1:02:84:17:F3:5A:5B:B9:35:66:D9:8D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a24bca9-b6f5-3017-88f8-4158ed0135b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:14:1d:fa:52:c4:33:96:6e:c5:64:c1:c5:5f:b8:bc:9c:
         74:6b:05:73:45:83:91:53:48:88:88:82:55:da:ac:1e:6a:36:
         83:b6:f6:fd:ca:62:cb:df:69:c7:39:1f:04:ce:97:cd:f9:58:
         d0:59:97:85:49:aa:62:58:a9:17:6f:ef:7a:2a:4d:54:be:2b:
         cb:f2:e8:09:71:80:6f:f4:39:17:14:81:33:21:1f:ae:aa:74:
         34:79:20:ba:f2:a9:95:a2:93:28:e6:5f:54:07:8c:5e:e7:32:
         f3:c6:e4:41:38:df:bb:f1:cc:75:06:9e:ba:41:96:aa:1a:b0:
         c5:78:3d:63:f7:c9:62:33:fb:0d:70:9b:82:19:de:e7:62:d7:
         7d:ba:28:2f:28:1c:e5:6a:f1:5e:25:5c:bf:95:d6:d6:39:5b:
         1f:43:6b:58:55:5a:d6:41:05:8a:13:1b:65:f2:72:3a:2f:fc:
         af:8b:af:a1:5e:40:da:be:d2:c9:86:55:84:5a:5b:63:d8:05:
         85:98:28:c2:72:48:4e:6d:df:1e:d8:45:6f:bc:0d:b0:f0:20:
         8f:be:99:28:73:58:fa:0b:93:f8:fc:8d:a3:57:42:11:45:02:
         8f:e5:52:1a:c2:4a:a3:19:5b:2d:e4:d9:fc:42:2e:6b:e0:87:
         ff:ed:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:23 2025 by rpki-client