Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a593d83-2e3a-3277-a0bb-60702fcd9980.roa
File:                     9a593d83-2e3a-3277-a0bb-60702fcd9980.roa (raw, json)
Hash identifier:          5N5s9i64VAobuAD+lIUeUi72n23YwinEPdyuNONM0bQ=
Subject key identifier:   F4:56:5E:2A:E1:16:B0:11:6E:CA:32:5E:98:12:A7:A5:2A:69:5B:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF078C2759E7C802FBD4300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a593d83-2e3a-3277-a0bb-60702fcd9980.roa
Signing time:             Thu 24 Jul 2025 12:38:49 +0000
ROA not before:           Thu 24 Jul 2025 12:38:49 +0000
ROA not after:            Wed 22 Oct 2025 12:38:49 +0000
asID:                     396583
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:78:c2:75:9e:7c:80:2f:bd:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:49 2025 GMT
            Not After : Oct 22 12:38:49 2025 GMT
        Subject: CN=03386f4d-4a29-4d7a-abef-617c32b27b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:a3:55:7c:3d:ed:79:2f:de:ec:64:4d:57:
                    9b:d4:c3:2c:d4:ec:01:9c:d8:17:cb:1e:5a:26:e0:
                    dd:bc:94:8b:1c:53:5c:d8:db:28:5c:a8:31:89:9f:
                    b9:f8:f5:a0:ce:58:79:4f:88:3c:6d:a6:33:38:21:
                    d7:59:43:6a:f6:18:ce:22:be:77:1e:9a:87:da:88:
                    fd:5b:a5:19:19:bb:4f:70:c2:9b:e4:03:5e:ac:b7:
                    2e:47:05:7e:70:bf:a6:92:39:75:33:cc:6e:52:a6:
                    2d:fe:37:a5:e4:23:3d:be:eb:a9:7f:cf:93:a1:a3:
                    16:98:3c:48:8c:66:32:f4:59:f0:3c:be:c5:7b:7f:
                    8a:6c:c2:b3:c3:3c:8b:96:b0:9b:ce:78:e3:c7:f6:
                    f9:f6:c2:16:c2:a9:9b:ed:21:9a:3c:d3:2a:cf:e7:
                    c1:ef:b7:c1:71:69:a2:a6:75:0a:31:44:d2:50:cd:
                    f5:60:3a:4f:94:e7:51:18:b1:17:87:45:99:ed:b9:
                    2d:31:78:9e:79:49:50:87:0f:af:8e:65:d8:a1:e8:
                    bf:38:ac:a3:71:64:b1:8b:13:33:8d:8b:36:d4:b5:
                    1b:6a:20:6e:f2:53:22:a9:f9:84:88:9f:ba:ef:11:
                    82:e4:af:5e:03:40:78:ce:74:67:0e:0b:5e:16:9c:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:56:5E:2A:E1:16:B0:11:6E:CA:32:5E:98:12:A7:A5:2A:69:5B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a593d83-2e3a-3277-a0bb-60702fcd9980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1c:3e:ca:77:3c:1e:da:e3:bd:49:c5:6a:42:01:84:90:3e:
         69:c2:9f:0a:7f:6c:ad:78:29:d2:6f:d9:c1:54:15:9c:f8:3b:
         24:2b:5d:02:1d:62:27:d5:9a:e0:e2:96:5e:41:6d:90:1a:9f:
         01:81:1c:e0:0d:2f:ed:ea:d8:44:5d:65:9f:eb:cd:4f:e8:ad:
         b0:f2:ca:33:b6:33:9d:1a:b5:7e:7f:9f:d0:d2:fd:4b:cf:c1:
         7a:c6:a8:73:55:eb:9d:90:3b:bb:63:87:e4:64:6e:76:16:22:
         f1:c3:fe:87:ec:5f:96:43:6e:16:5b:6f:b2:be:3a:7a:8a:71:
         19:4f:2b:75:42:03:f3:98:21:e7:ba:f3:b4:31:1c:f1:ee:a9:
         13:5d:22:bf:46:e9:a8:c0:04:29:8b:cc:7e:d2:00:34:aa:72:
         e7:c0:08:20:32:53:2c:52:77:ea:d8:bd:0b:13:90:7b:39:a5:
         c1:ed:f3:49:c4:cc:b8:73:b3:b5:c3:3b:8c:97:06:0f:82:86:
         06:0d:08:6b:15:39:64:2c:a1:5f:19:2d:84:0a:ae:83:0e:d5:
         72:49:d7:08:e7:0d:bb:a5:bb:de:06:1c:2f:6d:27:ae:2b:56:
         5e:01:a6:1c:f1:f8:49:bd:d6:92:66:e1:a0:bb:8c:61:6b:fc:
         3a:8b:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:26 2025 by rpki-client