Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa
File:                     60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa (raw, json)
Hash identifier:          SWdjENBv56drF9s+ID1dsFJ5yccoWX/BXKiuuAQQZtk=
Subject key identifier:   DA:06:B6:50:38:64:0A:12:7A:63:E5:35:3D:71:C8:05:28:C6:EB:7B
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584A8575F3B2C346872A48B0A000
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     22885
IP address blocks:        199.0.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f3:b2:c3:46:87:2a:48:b0:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=7987d64e-6dac-4e68-a240-6aaa3b07b37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:0b:87:a4:57:55:82:4e:02:f4:b8:4e:96:
                    ce:6d:a8:66:f1:75:7d:00:97:27:33:cb:8a:61:71:
                    dc:0b:98:86:d0:e9:5b:1e:ac:69:e2:f7:9d:61:fc:
                    c5:01:ab:d1:05:ac:57:a5:ad:b1:08:0b:9e:6c:cb:
                    66:0b:86:39:c9:79:de:4e:41:27:0b:34:b2:37:f9:
                    c8:60:20:02:0f:cc:98:9b:dc:b7:1e:a0:de:55:6e:
                    7c:d6:0c:ae:3c:94:6d:f0:6b:42:48:07:5b:c1:2b:
                    1c:c4:27:37:a7:ac:7e:7d:86:77:fb:fa:83:88:46:
                    77:b0:5b:d7:2a:7e:84:2a:75:05:f7:f4:91:db:e1:
                    43:7d:01:da:33:01:72:45:93:5f:7b:82:43:25:92:
                    5d:6d:fe:1b:c4:8a:37:1d:f6:5e:fb:74:88:b2:ee:
                    37:1f:8d:9d:bf:da:61:0c:1f:0f:d5:a9:24:5c:53:
                    c5:0a:18:f3:6a:64:97:e4:0f:cf:37:27:01:d4:00:
                    26:46:fb:41:68:b5:4a:bc:77:40:ce:15:17:6a:76:
                    4e:47:1b:34:91:f1:52:d5:29:a5:4c:50:7f:eb:bc:
                    8c:df:c3:5f:83:83:c3:0a:1f:5a:a8:f1:ca:67:0c:
                    80:72:7c:af:05:fa:df:ff:22:a9:20:45:58:c3:ac:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:06:B6:50:38:64:0A:12:7A:63:E5:35:3D:71:C8:05:28:C6:EB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:da:e4:b0:3d:4f:f8:af:7d:c1:d6:c9:b8:7e:fb:ac:67:
         34:db:d0:11:78:4a:a5:9d:87:2f:ba:f2:0e:0a:18:13:82:4f:
         1d:12:dc:1e:c1:36:54:e1:3c:58:c7:4f:76:9d:0b:60:61:c8:
         5d:6c:d7:ab:15:89:72:db:02:b6:c0:26:cc:9b:88:09:38:a4:
         75:8c:1b:5c:23:19:f8:5c:b5:dc:1c:1a:47:28:7b:74:7c:64:
         52:08:37:86:35:a7:ef:16:8f:5f:b5:bb:d0:09:98:57:ea:9d:
         f1:5a:98:1d:5d:3e:40:86:cb:64:01:94:a2:95:3a:20:5a:d1:
         99:7b:73:40:14:04:f7:5c:b6:a8:52:e3:b8:de:88:45:11:4c:
         28:5e:57:e3:b2:9f:da:5c:c8:b2:1d:94:d4:c5:34:c6:f1:6b:
         dd:5e:22:2b:b6:2e:6c:1c:02:12:9c:fd:a7:34:b2:1f:e7:a5:
         40:d1:84:8c:a5:c6:6c:4d:f6:ea:e3:23:bf:d5:f8:47:75:55:
         9c:cc:73:7b:b5:ef:cd:14:2e:5f:a2:15:1b:6c:bf:61:6c:cc:
         ec:8f:2b:24:08:4b:8a:50:84:ee:ae:f3:7d:06:2b:26:48:e6:
         67:42:bf:f2:c9:c9:db:a3:37:d3:2f:6a:7f:69:06:1c:0f:00:
         26:9e:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:24 2025 by rpki-client