Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bccfc752-0542-3c04-bd07-132c55b6d391.roa
File:                     bccfc752-0542-3c04-bd07-132c55b6d391.roa (raw, json)
Hash identifier:          w4G0ctAeIFDNy2EBpsc3ZAaCiIzc7vY+YvNKBRdYg6U=
Subject key identifier:   1F:60:9D:A4:DE:5E:BE:FA:39:C5:65:0D:2C:41:53:E2:E2:12:29:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E4A20A971E2200321660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bccfc752-0542-3c04-bd07-132c55b6d391.roa
Signing time:             Thu 31 Jul 2025 12:32:02 +0000
ROA not before:           Thu 31 Jul 2025 12:32:02 +0000
ROA not after:            Wed 29 Oct 2025 12:32:02 +0000
asID:                     396588
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e4:a2:0a:97:1e:22:00:32:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:02 2025 GMT
            Not After : Oct 29 12:32:02 2025 GMT
        Subject: CN=9723c74b-1906-4dc2-88dd-bd695a78c37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:7c:7a:ec:94:1e:99:8e:46:e6:f0:64:a6:
                    e3:04:fd:44:a4:1d:d0:07:83:e5:e5:3e:22:69:ed:
                    72:86:89:76:95:3e:ae:96:b6:c3:89:b1:49:a5:37:
                    e2:10:db:b6:fb:de:a8:29:1e:86:3c:de:23:07:16:
                    97:13:08:89:44:ec:c4:8f:7a:4d:b0:fb:58:e8:a3:
                    f8:39:df:4f:af:2e:7b:31:fa:b4:3f:2d:22:db:5d:
                    5c:7e:90:4b:2a:ba:e1:53:ce:b5:a0:bc:04:e9:b0:
                    18:88:7b:17:14:c5:7a:19:4a:f6:58:9f:db:b7:94:
                    5b:e1:6a:64:53:db:22:87:9b:5a:bb:34:b0:c0:e1:
                    67:3a:87:ad:7d:7c:b0:15:8f:d7:7f:4d:af:e5:6c:
                    11:63:99:27:59:8f:c9:c0:b4:bc:82:85:b2:fe:4a:
                    f5:56:df:b8:39:e5:b4:9a:55:a4:50:b2:d4:26:10:
                    1e:0f:13:3d:d1:42:19:be:a3:62:25:1b:b5:2a:a7:
                    77:10:f6:2e:ee:16:e1:6f:66:9f:d6:ef:26:29:6f:
                    af:24:c4:50:df:c3:4a:26:f7:75:5d:9b:78:8e:01:
                    73:9b:e5:be:aa:d6:39:40:e5:9a:20:6d:2a:6e:04:
                    f0:ed:5b:ff:55:60:e5:a8:3c:2e:09:a0:8f:d7:53:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:9D:A4:DE:5E:BE:FA:39:C5:65:0D:2C:41:53:E2:E2:12:29:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bccfc752-0542-3c04-bd07-132c55b6d391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:db:a4:fb:66:53:51:58:46:84:e2:86:e6:d1:19:b7:a8:
         30:1c:aa:ca:c7:67:57:d3:c1:2d:ca:33:91:36:ab:01:a0:05:
         61:c4:36:66:f3:4a:06:fb:a1:c1:e8:b7:5c:23:93:53:8f:e5:
         f7:af:9e:ae:ad:37:ec:c4:62:8b:ea:e9:bf:79:7c:6a:3b:d2:
         a2:65:16:99:1e:bb:c0:44:74:6b:23:bd:5f:53:e5:6b:55:14:
         5c:64:65:85:c3:09:4b:77:15:00:47:94:bc:a5:9f:82:19:f0:
         5d:c4:9f:f8:45:95:88:69:03:1a:a4:47:68:a1:36:dc:63:b7:
         2d:ab:9e:52:d2:4b:e4:8f:d1:10:cd:9f:06:b5:c7:5c:a4:e2:
         87:41:28:f8:3a:3c:00:a8:86:c5:88:e1:21:7c:18:20:1b:ef:
         70:1e:6a:03:ea:27:03:9b:5a:75:8f:e9:06:d2:98:26:ab:97:
         af:5d:c7:52:15:5f:5f:33:d2:01:8d:64:60:34:ea:37:28:e4:
         50:ff:2e:72:ee:b6:6f:9c:3f:de:3f:6d:b8:fd:ee:0d:9e:cc:
         42:01:38:f3:f9:70:8a:e5:cb:2f:0d:6d:cc:78:ae:3d:20:d5:
         5a:37:64:86:62:fe:4f:0d:7e:dd:d6:fd:ee:9b:d3:7d:53:d9:
         43:9e:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:43:39 2025 by rpki-client