Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
File:                     f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa (raw, json)
Hash identifier:          ZuTJXKNLfM2mHOksfJd/Y2CfvyM3SoCvbi358errEjY=
Subject key identifier:   1D:37:FA:80:26:32:C8:E8:D5:47:3E:46:66:43:21:DD:63:0C:4B:C3
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F4328584AB4EB71593F98AC3C172C97C0
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     32098
IP address blocks:        199.19.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:71:59:3f:98:ac:3c:17:2c:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6c6559c9-22ad-47c7-9da1-8d1ecd160f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:41:91:9f:d2:39:35:53:cf:96:7d:97:80:
                    9a:bb:80:a7:d6:33:d4:78:01:25:86:3d:52:85:e0:
                    04:a0:c2:8e:a2:2f:d1:fc:64:0e:21:36:22:11:2c:
                    be:17:8f:db:92:0d:4b:e2:a1:0b:ba:6e:5e:57:f6:
                    43:31:48:78:21:79:e8:2b:03:93:ba:bc:f7:26:17:
                    39:b9:99:30:ef:71:2d:44:a7:90:34:09:8b:c5:b7:
                    11:14:a9:29:ef:c7:54:79:51:2b:8a:02:1d:fd:83:
                    18:98:ca:ba:d8:79:07:83:a9:56:38:44:55:98:a8:
                    ad:df:86:b3:a8:85:b7:d8:fc:b7:3c:cf:4b:40:ee:
                    7d:31:46:e1:44:af:f3:28:ed:91:99:a3:c0:63:75:
                    8c:f0:4a:05:de:1c:6a:08:fd:52:03:99:ab:c9:1d:
                    13:8b:64:1b:7b:86:50:a2:c1:96:7c:66:27:29:08:
                    2e:06:0a:92:ec:26:20:7a:4e:de:8a:ee:36:9c:4f:
                    38:49:10:10:11:11:64:22:0f:4f:58:d7:04:f4:29:
                    ea:20:91:7e:27:b0:e1:32:90:a5:f5:da:18:82:4e:
                    7e:14:ae:1b:db:08:10:fe:b6:a6:03:04:28:f7:88:
                    94:2f:aa:7b:68:9f:ef:3f:81:43:3f:d8:19:11:8a:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:FA:80:26:32:C8:E8:D5:47:3E:46:66:43:21:DD:63:0C:4B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:64:bf:94:47:82:85:86:a0:16:27:23:d4:5c:04:72:dd:
         c8:33:1a:ee:5b:fb:b2:b0:74:10:5e:d8:05:8b:fa:f8:42:0c:
         9e:0a:e4:a3:33:d6:f1:f8:3e:92:db:a8:4c:3e:8a:4f:3e:1d:
         52:12:76:ba:3c:38:48:07:df:2c:61:4f:74:5b:11:46:08:72:
         cd:96:1e:38:1c:b2:13:85:04:97:6d:1d:2d:58:64:cf:14:46:
         9d:8d:bd:fa:83:c6:e1:a9:70:51:e7:83:2f:22:c1:06:05:db:
         19:0e:0d:18:6b:13:04:cd:4e:2e:2a:69:4c:61:8d:4d:16:76:
         27:5c:de:aa:05:16:28:cd:15:1d:ee:4e:52:b9:60:c7:3a:e0:
         b5:b2:26:a7:95:42:36:21:bd:01:f2:d6:29:1f:75:b3:ab:1b:
         40:48:46:a2:43:7e:ae:15:f7:20:67:9c:ef:63:d6:3f:25:ac:
         19:59:42:df:f1:14:4e:2a:2d:97:40:ed:b6:ac:9b:47:a6:f9:
         bc:f2:b9:a3:1f:42:cd:5a:6d:c5:05:59:bc:f1:d4:fd:f8:ad:
         2b:d2:90:73:0d:33:24:ec:5c:a0:ff:0b:95:df:05:35:fc:62:
         7b:f2:de:fd:b6:ef:a7:65:48:61:6b:c7:84:d3:11:73:40:c5:
         97:0a:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:41 2025 by rpki-client