Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/0f497500-d8aa-34a7-8832-9a1723a50b4c.roa
File:                     0f497500-d8aa-34a7-8832-9a1723a50b4c.roa (raw, json)
Hash identifier:          aaiJV+cyrSWh39H+LiEYxiBvY45d/r4+60y9yrNw2ao=
Subject key identifier:   DE:F4:B7:B4:33:88:06:08:B8:E8:07:DB:06:CA:EE:33:5A:FA:3E:D3
Certificate issuer:       /CN=08190b53-d45c-48b6-a6c7-7c0769d864a4
Certificate serial:       010D0C9F4328584AB91BB3A68521EF6BF8561240
Authority key identifier: B0:F8:C4:8D:22:38:1A:A8:CF:FA:59:E6:00:3E:92:EE:9E:DE:73:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/0f497500-d8aa-34a7-8832-9a1723a50b4c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54131
IP address blocks:        192.12.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/08190b53-d45c-48b6-a6c7-7c0769d864a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/08190b53-d45c-48b6-a6c7-7c0769d864a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b3:a6:85:21:ef:6b:f8:56:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08190b53-d45c-48b6-a6c7-7c0769d864a4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=89c725bb-d597-4004-a5f2-d5f052c30029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:fc:a6:bd:54:9e:f1:94:74:d5:0c:3a:b4:
                    cb:e6:b1:fa:2d:01:1d:cd:1f:a6:21:97:bf:a2:5b:
                    de:4a:11:58:8e:19:6a:03:52:16:c7:79:51:a4:f8:
                    b3:45:ab:c7:50:88:8f:fe:26:01:9a:09:d1:0a:94:
                    8f:07:74:98:65:75:72:e9:3f:10:4f:e5:2c:f1:99:
                    1a:cf:2b:8c:0a:a3:ee:e8:25:77:66:6a:1d:54:b6:
                    05:0d:8c:0a:c2:b7:f8:65:d2:6a:79:fd:89:56:72:
                    8e:03:c7:83:11:77:e6:a2:08:ac:0b:fb:84:f9:0f:
                    6c:ed:de:ea:cf:6c:3d:39:59:6c:3d:18:84:7c:c7:
                    24:e6:c4:bb:52:bc:71:54:8c:17:2a:dc:bf:a5:af:
                    30:8c:15:52:cd:b2:15:c7:8f:b4:9f:05:4d:81:78:
                    b6:26:e2:bd:fd:c7:ef:c1:8c:31:9f:2f:1c:4b:87:
                    d1:b2:06:b3:86:bb:92:c5:a0:57:5c:6d:e4:83:b0:
                    08:3f:23:07:a9:e0:1e:4f:8b:19:b9:88:70:91:e8:
                    bc:bc:14:16:02:32:be:05:73:d8:00:c8:a1:26:08:
                    24:24:20:ad:f6:f3:44:e0:a9:79:f2:28:48:c4:ba:
                    07:63:b6:4c:8c:da:e5:7f:78:4d:f2:c0:7d:1c:bb:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:B7:B4:33:88:06:08:B8:E8:07:DB:06:CA:EE:33:5A:FA:3E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/0f497500-d8aa-34a7-8832-9a1723a50b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4/08190b53-d45c-48b6-a6c7-7c0769d864a4.crl

            X509v3 Authority Key Identifier:
                keyid:B0:F8:C4:8D:22:38:1A:A8:CF:FA:59:E6:00:3E:92:EE:9E:DE:73:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08190b53-d45c-48b6-a6c7-7c0769d864a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:73:94:2a:57:53:96:8b:de:b4:8b:72:61:6b:5d:63:f2:31:
         89:10:65:f4:8b:e0:d2:f9:db:3f:30:be:c6:bf:1c:cc:6a:b0:
         fb:32:26:44:32:24:eb:7c:28:2d:36:0f:70:ed:36:aa:65:c9:
         9f:fb:26:55:e7:c9:75:62:3d:c1:ef:5d:70:0b:20:88:e7:10:
         6d:ec:af:1a:0f:4e:5d:2f:43:cf:b4:c0:3a:fb:8c:d5:56:5d:
         2a:9b:9a:8f:47:a7:ba:ef:e6:07:30:ca:43:9c:31:95:f1:bb:
         6e:ac:d7:0f:86:8c:cf:65:1b:b4:4b:da:3b:4d:b0:21:7a:2f:
         1d:07:3c:f2:d3:0b:d6:50:df:76:d4:b8:22:48:58:bb:8e:c3:
         c7:8d:9b:42:25:6a:f4:52:9d:7d:9d:8b:08:38:56:57:27:b5:
         3b:a4:9f:9b:ce:dd:8c:26:0a:a4:37:d0:0e:a6:3a:1d:88:ac:
         0f:5d:b9:4a:85:57:40:ba:47:69:3f:9d:0c:e5:6d:2f:43:fd:
         e2:2e:8d:78:f5:54:c2:a8:de:59:06:2a:6c:cd:74:a7:fc:1e:
         2d:bf:03:3d:4f:f7:cd:61:e6:19:e5:41:07:2c:19:9a:17:c0:
         9b:2c:ca:4c:cc:0d:70:c1:ac:83:48:10:dc:d0:86:20:6e:ef:
         e6:b0:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:00 2025 by rpki-client