Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bac65284-e6b5-3aa1-92b5-ccb329933f62.roa
File:                     bac65284-e6b5-3aa1-92b5-ccb329933f62.roa (raw, json)
Hash identifier:          pMV2/xn0LsPnzqAUgW3YZsCy05geolkVnuWP6p65Bxo=
Subject key identifier:   AB:4D:40:68:93:61:8F:0B:F5:41:1C:0D:B0:D7:F5:D8:3A:69:D9:3A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285849E22532CF219FD43FC83BF500
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bac65284-e6b5-3aa1-92b5-ccb329933f62.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16696
IP address blocks:        199.192.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:32:cf:21:9f:d4:3f:c8:3b:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=3f87ef08-c9a5-41c2-b5cc-fb026f65b5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:0b:14:da:34:87:4f:60:d7:7a:13:07:c0:
                    cf:44:40:37:94:45:9f:81:15:a5:47:80:65:03:4c:
                    a5:63:ee:f5:ce:7b:3a:8f:fe:fd:7c:bd:c8:49:2f:
                    bc:a0:b9:43:95:bb:2d:73:88:c8:71:66:fd:16:3c:
                    68:ec:a8:c1:39:a9:f5:71:18:2b:4f:09:9a:71:81:
                    c1:41:97:0e:e9:b0:57:4f:c7:52:80:e3:e9:9a:ec:
                    d0:8a:34:eb:2f:11:e8:66:21:3a:95:03:9e:76:fc:
                    53:a3:ec:ce:df:c5:12:6e:a8:e5:0e:e7:28:bf:27:
                    6e:51:99:43:30:90:59:41:2f:11:48:f7:63:9d:3c:
                    f4:67:dd:ac:3f:dd:7b:66:25:d3:8d:06:dd:b4:25:
                    7b:f8:27:ee:34:cd:15:55:7d:f8:4d:e1:3e:55:66:
                    38:2b:33:b1:5d:89:d2:95:af:65:f3:fd:3b:a6:99:
                    62:4c:f2:6f:bc:85:7f:f9:f3:39:3d:d8:ff:0d:3f:
                    3d:61:c5:7b:b4:2a:35:eb:06:ac:e9:98:3e:9a:6a:
                    f5:13:10:3a:66:6a:d3:b2:ee:46:68:d4:5e:52:e2:
                    09:65:c1:a9:40:72:b6:bf:6b:99:bf:d1:ea:92:a4:
                    99:d1:72:e7:91:f2:61:57:83:68:c0:1e:e9:5a:5a:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4D:40:68:93:61:8F:0B:F5:41:1C:0D:B0:D7:F5:D8:3A:69:D9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bac65284-e6b5-3aa1-92b5-ccb329933f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:5d:db:0d:35:32:22:ad:29:18:53:50:3c:1b:ed:b2:df:
         dc:a5:db:8e:57:7d:16:b6:47:d5:8f:ba:3d:4e:13:b6:d1:66:
         60:fb:92:40:4c:45:4a:dd:70:5b:2f:00:5f:e9:2a:71:0e:b3:
         28:30:61:6e:71:8f:a2:db:8e:55:fe:0d:4f:27:20:ff:93:91:
         ec:c8:7c:e9:e9:48:f3:57:47:be:82:de:31:20:5c:26:b5:4b:
         5a:1d:47:1a:c1:d1:66:cd:e7:8e:07:44:52:f2:ef:6c:aa:2c:
         ba:a5:71:e4:b1:6a:b9:a6:32:f8:e7:fb:48:69:15:d7:58:ae:
         db:1a:e1:08:2c:70:35:dc:83:b6:53:59:f6:8e:a3:0c:e3:e5:
         0c:80:01:53:8f:a4:70:c3:4e:e8:3a:ae:50:25:de:cd:7c:b3:
         0e:42:ad:af:31:c1:22:f5:71:fd:ca:b4:45:d3:21:17:75:ec:
         77:8b:ed:a5:3f:ee:14:6a:9e:75:e8:5a:3a:a4:bf:f1:33:fa:
         1a:7e:83:50:3f:b3:2a:13:54:31:c5:aa:15:7e:a4:ef:4c:9e:
         32:6e:38:f3:8f:ba:88:62:e9:f5:a1:5d:dc:bf:88:bd:1c:e5:
         a6:63:90:4e:b8:17:98:97:28:40:06:7f:15:21:63:55:fc:2f:
         23:15:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:04 2025 by rpki-client