Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
File:                     54fa5541-fc93-3994-8d7f-7112e1803d57.roa (raw, json)
Hash identifier:          +eAwjRNFZFuygIT+bzUOKzkifap6YHuZp74euBy5enU=
Subject key identifier:   9F:7B:B6:23:1D:F1:B3:53:C2:17:59:D6:4A:E1:37:AD:27:3A:88:56
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285849E22532C2138D868583403710
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16696
IP address blocks:        199.192.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:32:c2:13:8d:86:85:83:40:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=eb5e98fb-c7a8-4285-a512-d0c427376a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:7e:14:01:cf:3e:3c:55:dc:e0:8d:cb:d5:
                    17:e6:d1:02:8f:e0:6b:f0:87:8a:e0:bf:df:ef:23:
                    99:fe:dc:03:4d:87:a0:02:5c:b9:60:f6:bf:3c:7b:
                    42:38:79:4f:47:dd:3c:40:43:fe:0e:2b:f6:66:cb:
                    5a:3f:d7:c5:1e:5e:12:6b:d1:f3:6e:52:23:89:da:
                    0f:ae:30:51:c9:cd:3f:d4:69:68:9a:cb:89:86:99:
                    f2:dd:f2:83:be:3a:a0:8e:83:38:e7:a3:66:ab:c8:
                    2b:cd:31:66:d8:39:0b:a5:05:85:12:8d:cc:b8:2a:
                    4b:2e:83:1e:c4:f0:d6:fe:04:0b:bb:4d:91:e9:49:
                    ba:d3:15:34:4a:67:29:ef:ca:40:2f:46:a0:f6:23:
                    78:f8:63:f7:3f:84:e6:01:01:fa:f1:db:a7:56:b7:
                    26:91:8b:8d:0e:29:9b:57:f4:7d:dd:1c:95:b4:85:
                    b3:f6:ea:73:87:26:2f:89:c0:ca:58:68:f2:d2:b5:
                    c6:ba:25:f6:3f:e5:18:a8:df:75:6e:2b:56:68:48:
                    d5:8c:e6:49:e9:b9:40:54:38:70:fb:80:7c:5b:ee:
                    a2:cd:43:09:02:53:3b:78:91:fb:57:bc:24:82:b6:
                    09:84:80:01:27:6d:ab:a9:2f:7c:87:03:0d:c8:08:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7B:B6:23:1D:F1:B3:53:C2:17:59:D6:4A:E1:37:AD:27:3A:88:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:97:fc:95:1e:d4:98:f9:71:1e:26:60:00:3b:bd:df:31:24:
         96:c3:e0:3a:e3:7f:d2:de:ca:9b:62:9d:e0:e2:b1:a0:cb:c3:
         17:11:ae:c0:b0:a4:cc:62:b6:fc:de:80:0d:1a:34:bd:d8:9c:
         eb:9e:f4:3a:84:3d:5f:4e:82:22:73:df:47:51:cd:dd:ff:0c:
         43:b7:c0:41:a4:00:6c:20:b3:91:bd:18:9c:7f:9a:02:f7:d3:
         d1:00:e5:c5:9d:6f:63:38:a7:56:e2:44:79:5b:99:10:86:79:
         3d:cf:fe:98:b9:7c:5d:ab:65:ef:e8:5d:9c:df:2c:f2:76:e7:
         3a:35:52:d7:fa:4a:74:d5:3e:be:3e:f9:0c:58:42:d7:0d:22:
         1f:82:85:63:80:54:d3:b6:e4:49:b7:13:bd:4c:57:58:e1:92:
         61:db:f6:bc:d8:54:a6:60:87:e9:e6:a8:44:04:ab:a5:ff:3d:
         9f:bd:5c:7c:bc:8e:e4:fe:74:d5:2c:a8:a1:60:5f:ed:ab:87:
         54:da:35:af:aa:fd:53:9c:b7:83:5b:3a:18:23:80:e7:49:e5:
         ea:c9:f0:2f:d8:ea:87:ac:f0:9d:39:78:63:0e:41:38:28:e3:
         a3:a9:96:24:11:d7:cb:5e:75:b0:05:a6:0b:c1:12:03:1f:00:
         8a:d9:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:10 2025 by rpki-client