Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa
File:                     58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa (raw, json)
Hash identifier:          XrNHhfPuyI7kWKq993E5TOduigektUA8IUXIuNxEhmk=
Subject key identifier:   06:02:D2:30:8C:18:34:BF:87:1B:BA:58:14:DF:D7:4E:EF:0A:7F:F4
Certificate issuer:       /CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85
Certificate serial:       010D0C9F4328584AB91BA3CE856659FB2474C140
Authority key identifier: 20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     8075
IP address blocks:        199.248.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a3:ce:85:66:59:fb:24:74:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=06d5623b-43e8-4cc3-882c-d9b84c5abdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:fa:71:42:0c:6e:9f:48:6a:86:de:cb:6e:
                    36:f6:a9:2b:d9:7d:d4:b6:a4:7c:9f:27:d3:5c:89:
                    c9:d0:5e:af:e3:a8:0a:14:13:3d:c2:5a:b1:f6:9a:
                    9f:d6:8d:24:1c:e6:04:38:0b:e3:97:dc:23:e9:e0:
                    10:89:83:84:29:65:1e:67:2f:09:37:32:84:75:0a:
                    80:d3:15:14:96:9b:9a:ea:09:ea:83:4c:f9:73:dc:
                    62:3b:82:62:a3:6d:07:b1:3d:ab:1e:0d:0e:0f:32:
                    d2:98:c6:63:c4:c0:68:b8:82:55:b9:c7:25:9c:de:
                    d6:cf:69:85:4d:b8:bb:fb:21:49:d7:f1:05:95:5c:
                    36:8c:c1:5f:e6:69:5e:04:80:67:a1:3f:7d:c5:61:
                    0e:24:3d:45:5b:b2:77:a4:b9:cf:13:a6:27:c5:7d:
                    80:26:26:1f:81:96:bc:54:49:d2:08:5c:53:93:25:
                    39:32:bf:da:fc:46:e0:a0:0c:61:08:82:0b:fd:a8:
                    55:88:a2:28:5f:8d:80:36:61:fe:8f:73:92:80:3a:
                    76:e0:17:33:7f:bb:9a:1d:1e:c2:58:ff:32:40:2a:
                    5f:c9:4f:c1:82:0a:ad:29:d7:98:ca:98:ad:5f:ff:
                    70:7a:4d:ac:58:47:54:ad:91:f6:68:7d:8f:c0:35:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:D2:30:8C:18:34:BF:87:1B:BA:58:14:DF:D7:4E:EF:0A:7F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl

            X509v3 Authority Key Identifier:
                keyid:20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9d:b2:af:00:b8:33:48:34:dc:15:43:53:a6:29:22:b8:fe:
         98:88:f1:71:13:fc:b5:28:40:51:b8:0b:c7:cb:f4:b4:9b:7c:
         00:8b:63:49:97:54:bd:70:da:d7:8a:91:5f:e3:0e:71:06:6d:
         e7:53:4a:4e:e7:72:2c:89:1b:97:47:4a:20:34:e5:94:f7:d1:
         86:77:2d:48:47:8b:0d:0c:6a:70:22:3d:4b:d8:1c:85:5f:33:
         b0:92:1f:90:05:91:c9:19:8e:98:ba:8b:97:b5:0c:37:4d:e3:
         8a:7a:ed:17:89:25:a6:9e:c5:92:16:8d:38:ff:5d:62:7a:27:
         3f:8f:1c:b9:9a:be:e6:4b:d4:0c:a8:64:0a:e4:37:a6:e3:35:
         47:63:5e:9e:ea:32:86:f2:a1:32:dc:c4:ee:eb:7d:36:9d:88:
         05:19:03:f1:63:e8:10:2c:02:cf:cd:ea:c4:62:f7:67:9d:6f:
         c8:6b:a7:9a:81:59:15:4d:60:12:2d:92:5c:fc:5d:6f:4c:16:
         17:65:df:ea:c4:59:48:60:d5:4a:18:ae:af:07:fc:44:61:f5:
         b9:fe:51:55:fc:53:14:e6:fa:fc:39:41:49:eb:27:d6:e2:3b:
         1e:4c:23:c4:55:6b:3f:a6:c5:a6:e5:32:e5:6e:0b:84:79:4c:
         5b:40:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:01 2025 by rpki-client