Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1effd75-0f83-3be2-9d73-da2106368ab7.roa
File:                     f1effd75-0f83-3be2-9d73-da2106368ab7.roa (raw, json)
Hash identifier:          nUTiVKFd6SE00DzmX5r9y5VmXh0Vnyl/ewRts88MRWA=
Subject key identifier:   27:FA:96:B4:4E:5E:EA:0A:46:FD:4B:9C:93:13:F4:27:22:8A:3B:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF088E7FC168B112168FD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1effd75-0f83-3be2-9d73-da2106368ab7.roa
Signing time:             Thu 24 Jul 2025 12:38:56 +0000
ROA not before:           Thu 24 Jul 2025 12:38:56 +0000
ROA not after:            Wed 22 Oct 2025 12:38:56 +0000
asID:                     36621
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:88:e7:fc:16:8b:11:21:68:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:56 2025 GMT
            Not After : Oct 22 12:38:56 2025 GMT
        Subject: CN=0842527f-ee94-4157-898b-d3c6d010e8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:ce:84:f8:ab:4d:9e:b7:09:f9:c1:85:f7:
                    72:ba:4f:fd:88:ce:b4:88:09:21:af:ea:74:6e:ef:
                    f1:40:f5:ce:70:fb:79:ef:f7:73:58:9f:1c:a9:55:
                    39:19:08:d3:a7:bc:86:fb:6b:6b:d1:7b:62:9c:53:
                    64:da:f0:8d:e0:21:a2:63:44:74:92:d6:9d:6e:01:
                    7e:5a:95:08:d7:6a:ba:00:b8:9b:12:e0:c0:a9:3d:
                    14:91:5d:10:08:b5:5d:54:6b:ae:5b:59:fe:9a:8e:
                    60:62:c6:e4:bc:55:c6:e6:b9:fd:ba:c7:93:18:ef:
                    8c:e9:c6:d9:00:f4:dd:8d:ce:a4:da:e9:00:ed:86:
                    f1:4e:fb:12:6a:56:0c:eb:32:97:43:91:79:60:ae:
                    3c:99:a6:4a:47:cc:f1:05:0b:f5:0d:f3:17:ca:f9:
                    62:55:84:9f:cc:fc:c3:f5:3d:8d:4d:79:12:63:60:
                    e1:3d:ac:80:29:ba:45:d9:94:43:5e:d5:ea:ec:47:
                    b0:f5:11:f6:74:38:d2:6e:e8:c4:9b:e1:39:76:7f:
                    f9:73:be:26:ec:16:e4:83:b4:df:31:39:c8:b1:b7:
                    56:44:34:b2:d2:7c:a3:fc:32:9a:21:b6:79:72:b7:
                    15:84:76:6a:2d:eb:d2:5b:27:3d:f2:71:92:d8:aa:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FA:96:B4:4E:5E:EA:0A:46:FD:4B:9C:93:13:F4:27:22:8A:3B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1effd75-0f83-3be2-9d73-da2106368ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:e1:29:10:ac:b0:5a:1c:49:59:35:2f:bd:26:94:df:ff:
         48:95:ed:61:dd:72:fc:8e:47:9d:b9:13:df:b0:3e:51:7c:67:
         55:b3:06:75:69:8d:fb:67:e1:7e:8f:05:5e:77:b8:f8:01:45:
         7e:2a:24:44:79:89:fc:ec:ae:6b:70:1c:94:32:7b:3f:17:33:
         92:8e:13:a6:43:00:6d:5c:0f:f2:63:46:a8:9f:fd:03:38:96:
         2a:88:6a:88:26:f7:07:0d:62:14:50:cc:79:8e:a1:d3:25:a0:
         a2:a8:ac:56:b0:d0:a2:68:f3:72:4b:9b:47:f6:c5:f9:a8:62:
         37:37:e0:ee:96:89:38:a3:b1:b5:39:39:ed:34:3f:05:37:83:
         3e:a9:cb:a0:e3:66:6c:8d:14:32:98:35:89:98:4c:8a:5e:4d:
         3a:55:08:63:7a:e5:fa:25:bf:b4:f4:6c:3e:9a:49:1e:f4:57:
         da:dc:bb:41:69:86:a7:95:95:15:e0:62:a7:df:16:67:43:43:
         30:e9:8d:90:65:76:02:66:0d:02:bf:24:26:11:bd:e9:fa:e7:
         22:7e:19:46:36:83:8b:c2:db:ea:f6:bb:db:a2:62:b8:c5:8e:
         14:04:44:30:ac:ec:96:48:74:63:5c:82:04:6f:aa:58:15:3d:
         dd:17:dc:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Ijn/BaLESFo/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg1NloXDTI1MTAyMjEyMzg1NlowLzEtMCsGA1UEAxMk
MDg0MjUyN2YtZWU5NC00MTU3LTg5OGItZDNjNmQwMTBlOGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rLOhPirTZ63CfnBhfdyuk/9iM60iAkhr+p0
bu/xQPXOcPt57/dzWJ8cqVU5GQjTp7yG+2tr0XtinFNk2vCN4CGiY0R0ktadbgF+
WpUI12q6ALibEuDAqT0UkV0QCLVdVGuuW1n+mo5gYsbkvFXG5rn9useTGO+M6cbZ
APTdjc6k2ukA7YbxTvsSalYM6zKXQ5F5YK48maZKR8zxBQv1DfMXyvliVYSfzPzD
9T2NTXkSY2DhPayAKbpF2ZRDXtXq7Eew9RH2dDjSbujEm+E5dn/5c74m7Bbkg7Tf
MTnIsbdWRDSy0nyj/DKaIbZ5crcVhHZqLevSWyc98nGS2KpDLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCf6lrROXuoKRv1LnJMT9CciijvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjFlZmZkNzUtMGY4My0z
YmUyLTlkNzMtZGEyMTA2MzY4YWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAa4SkQrLBaHElZNS+9JpTf/0iV7WHdcvyOR525E9+wPlF8Z1WzBnVp
jftn4X6PBV53uPgBRX4qJER5ifzsrmtwHJQyez8XM5KOE6ZDAG1cD/JjRqif/QM4
liqIaogm9wcNYhRQzHmOodMloKKorFaw0KJo83JLm0f2xfmoYjc34O6WiTijsbU5
Oe00PwU3gz6py6DjZmyNFDKYNYmYTIpeTTpVCGN65folv7T0bD6aSR70V9rcu0Fp
hqeVlRXgYqffFmdDQzDpjZBldgJmDQK/JCYRven65yJ+GUY2g4vC2+r2u9uiYrjF
jhQERDCs7JZIdGNcggRvqlgVPd0X3JU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:37 2025 by rpki-client