Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/ff6aa355-e6db-3bcd-8931-235e1251e8db.roa
File:                     ff6aa355-e6db-3bcd-8931-235e1251e8db.roa (raw, json)
Hash identifier:          k95K2dFFLCORFH8CaYJvmKduPxSibYWWF+Y6v0RHMEI=
Subject key identifier:   B8:D8:D2:D5:62:B4:52:29:AF:80:59:76:FA:7C:81:5C:ED:9C:7A:49
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584ABEB0D94044A7E14F56FBDC40
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/ff6aa355-e6db-3bcd-8931-235e1251e8db.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     3628
IP address blocks:        192.52.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:d9:40:44:a7:e1:4f:56:fb:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=ed6f889e-51da-4857-8852-55ffcf39986f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:51:06:ec:a8:fe:bc:d8:92:d6:bb:42:14:
                    87:be:39:f7:0d:5b:7c:67:97:65:2f:46:02:86:6e:
                    f9:8f:08:14:5b:f7:12:0e:d1:6b:47:60:c8:7b:09:
                    c9:8e:24:48:2f:f3:9c:b5:72:a5:02:e8:1d:1e:c2:
                    c4:39:83:4f:f8:e5:30:8d:70:38:14:fa:57:2a:42:
                    75:e1:3b:ea:3f:27:ce:05:c8:4a:c5:9c:50:4d:25:
                    c3:da:87:79:97:0c:58:1e:36:90:d0:bf:fc:2f:96:
                    74:78:8c:bf:52:96:d5:80:a4:19:13:ed:5a:6e:a3:
                    fa:27:f2:37:f0:7f:ff:a7:55:cb:2d:ea:bc:d7:3f:
                    86:2b:ec:5b:ee:b9:d4:b4:ae:39:d0:66:17:c2:2b:
                    7e:29:8f:f3:98:cf:c8:c2:3f:0e:39:83:43:83:38:
                    8a:fa:0f:e7:89:ff:36:e2:5e:ed:f6:85:e6:d7:3d:
                    5e:15:e3:be:f3:8f:4e:4d:83:24:8b:03:dc:4d:16:
                    44:bd:b7:6c:f3:7d:93:12:55:77:43:ac:db:60:b1:
                    e0:3f:93:5f:5f:36:4b:ac:f5:f0:cd:4c:70:29:5a:
                    cf:33:54:8d:94:d7:d4:02:86:fc:a1:2d:71:b4:89:
                    5f:ce:4e:e5:b5:7f:d7:3e:e8:e0:07:5e:42:34:49:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:D2:D5:62:B4:52:29:AF:80:59:76:FA:7C:81:5C:ED:9C:7A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/ff6aa355-e6db-3bcd-8931-235e1251e8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:22:ec:bf:9d:4d:0d:2c:bd:ba:6f:81:80:3a:c2:93:61:f6:
         2b:7c:3d:6c:df:b2:49:ac:b2:6f:89:2a:6d:bf:d4:29:6c:63:
         71:e4:e7:ff:44:3f:27:e2:44:82:ea:fe:a5:26:b6:90:61:44:
         7e:21:ce:26:18:63:5a:f1:7a:e4:f6:e7:82:44:db:95:2c:01:
         69:e8:0f:d4:d8:e5:23:02:43:44:84:08:7b:22:6f:f5:79:4f:
         0a:b5:20:34:b1:ae:31:41:03:55:b2:57:97:61:de:30:65:12:
         f4:64:2e:fe:cf:8a:59:82:2a:c6:80:22:05:d3:86:ca:34:6c:
         4a:3f:8d:e0:46:9a:9a:77:c9:78:fc:99:49:a6:ed:50:24:b2:
         ec:74:e3:6a:11:3c:bf:23:42:c4:7d:8a:bb:98:1f:de:b5:96:
         d5:fb:02:5c:ea:e7:2e:e5:30:62:60:2b:b3:76:7b:53:3e:23:
         04:38:b6:8e:09:64:be:f1:b2:dc:2c:86:d9:27:fe:cb:ea:e6:
         1a:21:77:83:4a:73:a4:11:2d:00:d6:62:93:3c:72:1f:44:fd:
         e2:3a:56:5a:1f:77:77:29:5b:db:46:32:9f:ed:44:04:c9:1d:
         42:ab:fe:1a:0e:de:9c:05:33:14:05:50:f6:bd:42:13:1c:f9:
         cc:6c:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:39 2025 by rpki-client