Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3df30bd-367b-3761-98b8-e921e818d45f.roa
File:                     c3df30bd-367b-3761-98b8-e921e818d45f.roa (raw, json)
Hash identifier:          Q4vj1UrlrweK+nIjuM10C/GbWhSZmStuh/1JyGmQmhs=
Subject key identifier:   E2:EC:5A:4A:B5:0A:50:A0:D4:2E:4D:67:B4:D3:2E:65:66:6F:3E:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF0794A824334BE903E0640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3df30bd-367b-3761-98b8-e921e818d45f.roa
Signing time:             Thu 24 Jul 2025 12:38:49 +0000
ROA not before:           Thu 24 Jul 2025 12:38:49 +0000
ROA not after:            Wed 22 Oct 2025 12:38:49 +0000
asID:                     396591
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:79:4a:82:43:34:be:90:3e:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:49 2025 GMT
            Not After : Oct 22 12:38:49 2025 GMT
        Subject: CN=c22d5443-193d-408c-a955-e35a25736115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:22:f9:ae:ad:92:49:88:8e:17:89:73:19:
                    53:6a:94:86:98:bd:9f:18:f1:20:a4:02:8b:4c:aa:
                    44:3f:9b:3e:2c:dd:c3:97:2f:d2:ae:72:ba:03:8c:
                    c2:e5:4a:7d:d4:1c:54:44:d2:7a:d4:05:46:6d:db:
                    58:95:17:0d:7d:f9:30:b7:49:b0:44:88:56:5a:c7:
                    6e:23:f6:b4:45:aa:fe:33:87:ee:bc:0e:30:22:f4:
                    fb:25:9b:b8:b1:00:65:52:3d:4e:97:d6:bc:d7:68:
                    3d:a1:af:2f:2e:8a:e4:51:0a:65:35:9d:3e:33:b8:
                    4e:ab:68:0e:1c:f9:00:6b:d2:4e:87:4f:01:22:0a:
                    78:94:89:de:a4:fb:a4:09:ed:04:d0:a4:3e:44:74:
                    83:8e:bd:3f:8f:14:ac:62:83:c9:77:56:0b:3d:14:
                    bc:eb:1c:20:3d:95:a3:2c:3a:8e:e4:e8:55:76:0b:
                    99:d2:35:d7:dc:cb:7a:e8:c4:ac:8c:46:09:5c:b2:
                    d3:1d:52:39:1e:e4:7e:40:9e:d8:01:79:61:cb:e8:
                    92:ce:0e:43:0d:3f:8f:ca:c0:df:6e:84:96:13:e1:
                    eb:46:a6:be:7e:e7:e2:80:2d:67:57:8a:d9:83:47:
                    83:af:c0:e7:79:fa:71:0b:89:fb:57:51:67:46:2e:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EC:5A:4A:B5:0A:50:A0:D4:2E:4D:67:B4:D3:2E:65:66:6F:3E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3df30bd-367b-3761-98b8-e921e818d45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:d3:b5:8f:5e:0c:e4:3d:1c:fb:06:a7:34:50:e7:02:eb:
         b0:1e:b4:8c:22:4f:ab:fb:11:32:1c:a1:94:7f:c8:85:f7:02:
         97:eb:96:a7:18:73:30:5a:97:61:07:42:4d:e8:7b:a7:d2:a9:
         83:9c:41:76:ab:1b:33:df:b5:2c:99:f7:7c:6c:cb:a0:bc:67:
         07:3a:30:1a:3d:66:38:1d:08:32:ef:86:2e:65:47:11:4d:e8:
         4c:1b:97:70:38:f2:17:96:f1:22:3a:e8:ac:44:a5:cb:ab:12:
         bb:bd:10:6e:ee:f2:7b:af:86:36:8a:ce:91:72:31:a1:4c:39:
         8d:4d:ad:17:ae:d3:be:6a:bb:1a:7f:0d:a6:71:09:ca:a6:53:
         0b:6c:5e:ce:d4:be:4e:29:77:11:e8:ae:e4:67:de:dd:f0:7f:
         31:2a:2e:2e:f4:7c:46:ab:a5:59:94:6c:ac:b6:3c:82:6b:1d:
         37:00:05:e3:b3:98:0a:bf:87:ea:81:80:4b:60:02:f9:e0:86:
         c4:4f:e7:22:c7:c1:32:24:d2:a6:68:dc:d8:aa:9f:24:66:9c:
         51:6c:ed:e6:6c:bc:6f:11:6d:f2:00:88:44:16:1d:0e:e8:46:
         03:b3:1c:86:9d:66:c6:30:04:34:99:84:f6:09:5c:a3:9d:56:
         2f:d8:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:55 2025 by rpki-client