Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa
File:                     a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa (raw, json)
Hash identifier:          dvdMtznuVc+APv6DF232HLb8gAx9en/hDUowWWTitEI=
Subject key identifier:   21:FA:2B:F0:D9:FC:A7:E3:B1:36:F5:CC:75:84:7D:EA:7B:DA:6B:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16187EE2C118C04EC0BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa
Signing time:             Thu 12 Jun 2025 12:42:07 +0000
ROA not before:           Thu 12 Jun 2025 12:42:07 +0000
ROA not after:            Wed 10 Sep 2025 12:42:07 +0000
asID:                     397196
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:61:87:ee:2c:11:8c:04:ec:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:07 2025 GMT
            Not After : Sep 10 12:42:07 2025 GMT
        Subject: CN=0bfba586-9cf8-43ef-ae88-257da93dab41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:70:90:c0:84:f5:7a:0e:b7:cf:81:7e:60:
                    12:5a:b8:5a:34:b7:b1:0e:4d:24:94:9f:bd:d6:57:
                    78:02:42:9d:00:3e:3c:4b:cb:7b:ad:69:08:e4:f1:
                    ad:01:2a:6e:9d:b6:14:d7:5e:d2:88:a2:27:80:6a:
                    d1:30:19:c4:a0:e9:e0:3a:eb:ea:4d:22:87:23:6d:
                    1f:4f:67:a9:4c:7f:06:ef:36:45:1b:43:53:98:27:
                    d0:10:b1:be:28:85:8d:68:43:c2:0f:ee:3c:29:2a:
                    44:80:35:34:07:5d:be:5a:ef:d7:e2:a2:fd:87:bf:
                    69:d6:4f:b7:8c:95:e3:c9:c1:65:70:80:ad:69:b5:
                    e9:7c:fa:e7:d8:c8:3c:d8:31:79:ca:d0:d0:73:42:
                    e1:b6:4c:d2:b9:5b:9a:71:19:c0:70:8b:cb:e8:de:
                    65:5d:fc:ba:ea:dd:e4:b5:3b:32:1e:f4:6b:03:ee:
                    70:8b:f3:e5:c4:c8:e1:7b:09:56:ed:8d:84:6e:60:
                    b7:79:e3:58:84:f5:61:b5:5e:2f:17:e3:93:b0:00:
                    84:22:4a:ee:27:cc:61:52:a0:54:66:35:5a:a0:74:
                    a1:15:bb:94:c3:3c:cf:1c:24:9a:28:54:84:f6:d0:
                    87:6a:42:3e:a4:0c:30:30:05:52:5d:73:e9:14:32:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FA:2B:F0:D9:FC:A7:E3:B1:36:F5:CC:75:84:7D:EA:7B:DA:6B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bc:20:61:39:a7:c4:14:e5:ae:76:30:2f:e8:f9:36:21:6e:
         79:38:de:d0:46:3f:1f:44:52:9c:0e:68:2b:b9:c6:c0:71:03:
         bc:0f:df:36:26:7b:76:68:08:41:c5:ec:84:f5:95:3b:9a:81:
         47:ae:b9:d0:e3:e4:d9:2e:9b:4c:1c:0e:31:e3:10:b1:26:73:
         5c:8f:53:74:83:05:15:22:15:63:5d:d4:9e:1d:65:7d:dc:ae:
         fb:80:ea:c6:3a:b8:08:68:db:bf:f0:33:46:6d:77:e2:30:8e:
         d0:77:e6:fc:9b:19:cd:0d:83:ad:ba:70:96:a5:0f:72:85:e0:
         f1:84:65:d5:65:5f:a5:57:49:11:38:25:5f:86:ec:6c:00:e4:
         b6:9f:be:26:16:8e:d3:09:78:36:6e:43:f4:58:af:01:c9:63:
         2d:fa:b7:2e:7c:a2:f6:9a:b6:8c:fe:3a:5e:8b:7e:60:28:e8:
         a8:24:96:64:a0:02:49:d3:f0:a8:07:fc:5f:0a:64:8b:22:2f:
         34:c7:43:a2:3a:13:60:07:b7:92:04:dc:12:cb:5a:dd:34:db:
         06:93:0d:9b:4d:31:70:14:7c:f3:4a:c8:57:38:31:e6:32:79:
         07:ea:e7:53:e6:05:03:64:b9:59:07:e9:c1:70:ed:29:a0:aa:
         c7:31:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:54 2025 by rpki-client