Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
File:                     3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa (raw, json)
Hash identifier:          6OA3QXKW0a+/J5iZoS06fn0CkfWU0LMcNAzn7iarPsE=
Subject key identifier:   DD:E9:F1:65:02:32:13:DD:71:05:7E:DC:43:35:A2:7A:37:68:6C:59
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584A9900C54C7C574D05CC1FC500
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     29838
IP address blocks:        199.167.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c5:4c:7c:57:4d:05:cc:1f:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=8b452d24-76c0-4038-a601-97e413c65a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:57:76:42:ae:02:1b:69:0b:5d:e9:53:f8:
                    62:0d:0a:3a:f0:83:1a:08:3b:94:fa:f5:ef:87:0e:
                    88:ac:f1:61:a7:bf:10:53:8a:8b:bd:71:a1:e1:2e:
                    f9:57:0f:e4:01:f4:40:91:d0:4d:a9:59:9e:28:81:
                    b4:eb:55:1e:d5:ea:6f:57:b7:67:32:87:cb:fb:6f:
                    7a:27:69:16:07:8b:c5:3d:06:f0:e7:e5:13:4c:a6:
                    47:1b:fd:0a:18:e9:7a:b5:fc:df:2f:d8:7b:e1:04:
                    8b:fa:d1:b0:d2:5e:99:6c:4b:a7:fd:27:2b:45:1b:
                    34:80:4c:30:ed:16:72:42:c8:da:69:c3:1f:d3:f4:
                    83:24:3a:8d:9c:a0:26:73:30:d1:81:a0:e9:0f:f6:
                    d7:f5:b7:a2:92:61:c0:5c:1e:c9:cc:53:d1:03:ad:
                    ee:84:dd:ce:c6:84:b9:48:f2:37:12:67:c0:55:e8:
                    c1:cd:15:27:b3:d6:0c:69:bf:a0:6f:34:f7:16:03:
                    2b:1a:7f:a5:1d:c3:6f:35:29:42:5f:b8:f2:f8:41:
                    35:f9:97:62:ae:1c:45:38:a1:74:35:19:42:5a:8c:
                    02:e8:cc:ac:4d:e5:e4:f1:97:f2:0a:06:35:36:ca:
                    8e:24:e6:64:eb:9d:e9:7c:11:23:1a:69:18:4f:a5:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E9:F1:65:02:32:13:DD:71:05:7E:DC:43:35:A2:7A:37:68:6C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ff:bc:9d:8a:eb:a3:48:b7:f2:75:1d:23:dd:09:6e:7e:96:
         ff:62:49:db:d7:35:0d:f8:bb:61:28:1e:f4:30:03:71:db:f0:
         59:fb:c1:24:08:57:81:fa:13:c9:75:40:24:d4:85:70:5c:4b:
         74:0c:1f:7d:fe:72:47:d6:a1:ba:4f:9a:c1:e0:87:45:d8:4f:
         50:09:21:d5:da:9c:4c:99:18:26:6a:52:29:1c:93:2d:dc:ff:
         75:bb:1e:2b:83:07:1f:7b:ed:78:10:6d:09:b1:b9:57:ab:e8:
         ba:d2:00:a9:ce:de:4e:91:e1:32:a9:5a:50:c7:76:d9:d7:08:
         e6:90:9c:e3:46:cc:ee:13:cb:4b:04:6a:ec:06:83:12:9f:ab:
         e3:b9:e1:f9:25:ed:82:06:ef:c6:76:cf:2d:eb:bb:3f:0c:63:
         fc:6b:66:96:c8:54:eb:cc:49:80:70:2c:e8:30:34:2d:01:1a:
         66:0a:56:71:d4:9f:4e:e8:86:57:76:dc:61:f0:45:ef:e7:b5:
         52:d5:47:54:f7:ce:9b:b1:57:6c:99:2e:bf:16:bd:8c:63:75:
         fb:fe:30:eb:d4:84:ea:a4:e5:e0:5e:c8:35:7f:4e:2b:ee:b0:
         02:99:0f:03:ed:81:81:7a:8f:56:ca:77:f0:2d:b2:ca:2e:03:
         f7:2f:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:35 2025 by rpki-client