Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa
File:                     b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa (raw, json)
Hash identifier:          OMM/yablwuS4w5BciVQaq4RYlU/KNqxejTqTmFl/4wE=
Subject key identifier:   B3:99:D6:6E:B5:6B:6C:54:3B:5C:9A:87:CE:98:CC:36:52:C0:F4:CE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0D8EE2256EB7B40A12940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     27338
IP address blocks:        209.192.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:d8:ee:22:56:eb:7b:40:a1:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=465c3dc3-d6e0-4557-83d8-1ee44ca16fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:8b:7c:9f:bb:46:40:d8:17:0e:da:95:01:
                    68:07:94:ac:58:dc:4e:b8:c7:eb:b5:89:4a:1f:67:
                    72:e2:83:70:df:af:d2:1f:a4:d9:2c:ec:2f:9b:bb:
                    49:8a:dd:59:6e:46:74:70:1f:35:af:4d:58:70:ec:
                    ff:1c:44:42:26:ba:a9:9c:6c:65:3d:ba:7e:bd:ad:
                    cc:f9:de:77:3a:39:31:d2:91:80:6c:3a:58:35:65:
                    b5:83:6e:be:28:31:ba:f6:ab:57:0f:95:29:07:53:
                    a4:7a:b7:b5:9e:6e:89:8c:06:c2:9f:f6:4d:16:a0:
                    89:00:22:cf:90:a5:6c:91:e5:8e:54:9c:34:08:8b:
                    9e:9b:c6:64:e0:2d:2a:b6:8a:36:d1:ba:52:64:3f:
                    66:61:ad:b1:cc:99:c7:db:ad:5a:b3:f0:a9:bc:a5:
                    59:94:c5:c3:52:41:c6:76:34:4b:1e:6c:dd:73:b5:
                    53:43:b5:82:57:31:47:28:bb:89:f5:7d:a3:e9:7a:
                    2e:11:02:76:6d:6a:d4:ab:e4:17:5d:5f:eb:3c:02:
                    bb:c1:ca:13:99:79:ab:98:10:97:c0:82:69:c9:6a:
                    12:9e:95:6d:26:26:64:d9:43:74:ab:11:d8:1a:5a:
                    6a:5a:eb:72:aa:71:e9:6e:92:ea:68:33:f0:06:c7:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:D6:6E:B5:6B:6C:54:3B:5C:9A:87:CE:98:CC:36:52:C0:F4:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.192.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5b:7b:7d:26:d0:a8:5e:ad:d9:1a:1b:b2:17:16:7c:1b:1a:
         e9:14:2e:23:52:d5:1d:e5:b9:31:dd:a7:c1:2b:bd:82:d3:64:
         ba:a2:08:85:1a:f8:cb:55:36:23:6c:0a:11:d7:46:4d:b5:48:
         87:1f:6d:16:f4:26:4c:5d:bc:69:a4:ee:d0:7a:48:21:33:4a:
         71:c5:a2:d3:c6:2a:3d:b5:c8:4a:d0:1c:67:f0:ef:45:b0:cd:
         25:70:2d:03:2c:d1:1c:c3:35:0f:fc:7a:a6:2f:34:4e:e6:07:
         ff:92:e8:05:63:93:a4:a7:5c:c1:91:68:f8:2b:af:88:c6:61:
         03:b0:ec:fb:9c:bb:a4:6c:31:ab:63:7d:30:ac:80:3a:80:44:
         8f:34:95:3b:57:a1:86:d6:50:c6:b5:e5:2c:43:4b:13:a4:db:
         09:ce:69:f7:50:52:39:04:69:82:f2:fb:5e:7c:0d:6a:19:cf:
         90:0d:81:4a:69:39:ec:5e:19:b3:89:0f:ae:a9:94:b9:fc:ad:
         ad:46:6d:e5:ff:2a:a0:44:07:eb:2f:af:87:dc:65:49:4c:ea:
         94:fb:34:d6:86:f9:98:7f:7c:04:f5:ff:99:a6:5d:e5:d6:ad:
         2a:ac:d2:7e:64:86:ba:ad:22:53:5d:bf:5d:f5:6f:41:9e:8f:
         04:61:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:25 2025 by rpki-client