Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/dec5a3e4-19cd-39dc-ab3b-fd7d38be6ef2.roa
File:                     dec5a3e4-19cd-39dc-ab3b-fd7d38be6ef2.roa (raw, json)
Hash identifier:          4y2+DOOVGz0sHwjQKN4V6SwNplZknTJJ8EP+09ieJwQ=
Subject key identifier:   2F:5A:C2:68:73:B2:FC:92:7A:FD:DD:DE:29:6F:09:1B:7C:D1:86:51
Certificate issuer:       /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial:       010D0C9F4328584A9D30E5FFA9F946B9D3EC8240
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/dec5a3e4-19cd-39dc-ab3b-fd7d38be6ef2.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        192.104.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e5:ff:a9:f9:46:b9:d3:ec:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=fa6d8e51-25b8-43b1-a470-0a77cbbf9b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:59:8c:f7:be:fc:c3:0f:9d:9a:e0:2e:23:
                    94:e4:2f:57:a2:0c:a5:d8:5c:04:11:ea:30:7e:ad:
                    db:7e:66:b6:b4:6c:54:e7:c4:88:8e:a7:ce:df:fd:
                    f5:a5:a3:81:f3:2c:3a:bb:cb:5f:3a:40:66:2e:71:
                    37:cf:0a:7b:5d:b7:c1:5d:37:60:11:1c:8f:38:cf:
                    c8:46:b8:2f:af:ad:91:48:6b:39:2e:f5:c1:b0:c7:
                    12:fd:d1:3c:c8:67:d3:aa:00:67:01:7a:ba:e9:54:
                    ed:b9:49:ab:98:08:e9:ad:ca:ea:62:d9:2d:83:a8:
                    e6:28:05:9f:c0:ab:dd:5c:73:dd:9d:be:a5:45:20:
                    62:17:5d:2d:1c:80:ef:33:a2:8c:8f:89:d4:dd:fb:
                    15:3a:9f:d0:55:ee:f2:22:18:43:09:69:64:24:06:
                    0f:4f:ac:d8:6a:12:9b:de:bc:b0:79:12:36:94:51:
                    6f:2b:68:9a:66:28:9b:26:73:23:ab:e6:eb:c3:58:
                    0d:b6:f0:2d:bf:b1:5a:57:70:40:25:3f:6e:58:e2:
                    da:82:14:a8:ad:92:09:ae:88:f4:71:a7:42:d6:94:
                    9a:85:96:07:1e:ce:2d:aa:b0:c3:19:a3:8f:3f:a7:
                    f6:0a:c1:84:8b:68:90:a4:85:eb:e1:5c:47:a7:57:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5A:C2:68:73:B2:FC:92:7A:FD:DD:DE:29:6F:09:1B:7C:D1:86:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/dec5a3e4-19cd-39dc-ab3b-fd7d38be6ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl

            X509v3 Authority Key Identifier:
                keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:6a:9e:b3:a5:00:85:54:ff:a1:74:f6:a2:2e:40:a1:f5:
         31:1d:8d:c0:7f:07:32:c4:9b:34:00:38:97:f4:17:a5:71:0f:
         02:11:10:c3:4f:7f:38:7e:35:6a:e8:17:01:a4:ea:2f:09:21:
         b7:e4:42:59:01:35:83:5b:1e:79:91:c6:ab:d3:9a:3f:cd:9b:
         06:aa:50:96:df:5f:c6:b3:6d:49:1c:83:7d:f5:84:45:03:f8:
         7a:43:bd:c1:0e:fc:ba:4a:ab:b8:2a:3e:45:93:31:5a:21:dc:
         70:cc:81:63:32:17:fe:43:79:ee:5c:95:81:c9:32:2c:5d:98:
         31:c6:66:7d:fe:a4:13:64:7f:ea:b2:c2:b4:5e:3d:ee:e1:68:
         dc:76:7b:d1:fa:16:9a:b0:b8:0d:c8:5f:29:6b:f3:2a:bd:6a:
         21:ef:41:67:02:dc:86:5c:81:b4:fd:88:66:f7:c0:f2:15:60:
         66:28:88:2e:53:15:c1:25:17:12:07:9e:57:9c:fa:d9:cb:0b:
         68:23:cd:e0:e0:45:3c:09:0c:28:54:0d:6a:c9:9a:80:9d:2e:
         b2:04:0c:3b:a9:54:f7:ce:6c:05:dd:34:cc:19:32:74:ae:ba:
         5a:28:e2:47:7a:59:ed:13:bf:a5:6e:53:ec:4f:61:00:b8:5d:
         cc:d0:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:21 2025 by rpki-client