Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/26a175bb-b6f7-39bb-b1d4-4bf735aadac1.roa
File:                     26a175bb-b6f7-39bb-b1d4-4bf735aadac1.roa (raw, json)
Hash identifier:          3/qmftFDkbjWXZyElvcTQpNq0UfAoDTe4XBGldzQvGA=
Subject key identifier:   F5:87:AE:31:00:03:87:C2:C5:1D:4E:C2:66:47:AC:C9:A0:1B:61:2D
Certificate issuer:       /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Certificate serial:       010D0C9F4328584A6F2071B4D654F6F1C1354E00
Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/26a175bb-b6f7-39bb-b1d4-4bf735aadac1.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        192.200.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:71:b4:d6:54:f6:f1:c1:35:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=ed310d60-f4b6-4c60-862a-24e2a296c634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:50:fc:67:ba:16:b7:fd:69:6e:4f:3b:8a:c5:
                    5d:f1:ba:d7:49:72:ac:cd:82:6e:7f:11:67:3d:4e:
                    2b:57:b4:40:25:31:98:ec:94:73:ed:e9:eb:58:c5:
                    c8:a5:ea:7d:d8:68:3d:1a:88:14:ab:ad:07:5f:a5:
                    ac:d1:1c:7f:b4:08:bd:aa:72:7b:6d:47:b9:41:b0:
                    86:1d:ee:11:dc:44:2f:93:71:e9:56:e0:27:53:76:
                    a8:4b:f8:cd:5c:a4:af:93:23:02:f5:11:02:6e:8d:
                    c1:03:84:af:c1:ab:af:f3:a8:4c:3d:85:73:8d:d0:
                    b2:dd:b3:5a:d9:03:26:d6:25:c9:76:53:1c:31:8e:
                    25:67:11:71:ff:33:ac:52:00:86:ac:5c:9f:b6:37:
                    25:44:67:c7:d2:4a:22:7a:d6:66:ef:41:2f:f9:f0:
                    64:e6:10:04:0e:32:4f:e5:01:fa:02:66:df:0f:38:
                    ab:d0:53:77:cd:d0:7f:f2:a6:5d:52:ae:7e:f3:31:
                    48:6d:81:f2:8a:79:6c:da:c2:d0:2f:ad:31:bf:b1:
                    b8:5a:e5:12:35:bb:31:86:aa:3a:1b:84:32:2b:7a:
                    a0:4d:5a:de:30:a5:fe:7e:9b:38:b1:87:e5:4a:73:
                    20:e2:0d:70:0f:87:91:ad:fb:71:cc:2b:d5:10:05:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:87:AE:31:00:03:87:C2:C5:1D:4E:C2:66:47:AC:C9:A0:1B:61:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/26a175bb-b6f7-39bb-b1d4-4bf735aadac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl

            X509v3 Authority Key Identifier:
                keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:31:8e:34:20:af:c1:48:91:31:84:b4:68:07:47:18:50:
         64:5e:57:e5:8e:c7:50:ce:91:57:01:b8:19:93:03:d2:df:4f:
         e0:b9:80:7d:de:d8:b1:2f:cc:e6:eb:e2:66:3c:fa:33:d8:9a:
         a9:df:15:33:e0:84:0a:2e:ed:5e:16:3b:7f:68:21:68:00:94:
         98:01:37:cc:f3:e2:8c:c7:06:25:c3:eb:50:c6:67:8f:5a:6c:
         59:96:78:71:01:bc:8b:be:b7:46:d0:54:76:e5:5f:a0:62:f6:
         a1:39:8a:cd:cf:4b:c3:d2:fe:2a:47:0a:04:69:fc:e1:0b:69:
         0c:6e:95:73:22:66:68:0e:d8:3d:18:58:e4:ad:fc:f2:04:28:
         91:a1:fd:65:bc:88:ba:c9:07:dc:b6:3e:8a:94:c2:04:63:f9:
         26:2f:cf:e2:17:15:85:82:2b:07:08:e0:c5:a2:fc:4b:2d:4b:
         e5:d1:1c:c1:90:3a:36:7d:b9:00:18:52:c6:72:19:41:2e:b1:
         30:ce:e3:a6:58:8b:42:0b:7c:7d:c5:49:a6:46:3d:fc:f9:1d:
         ab:fb:61:77:66:1d:64:36:f7:73:d9:48:91:c7:eb:b5:64:ba:
         2e:bc:c3:88:80:16:f2:69:e1:61:40:22:59:be:1f:83:c7:d7:
         ad:cf:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:02 2025 by rpki-client