Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1054a5ee-00e6-3efd-8710-b322e970ad2d.roa
File:                     1054a5ee-00e6-3efd-8710-b322e970ad2d.roa (raw, json)
Hash identifier:          7ur62XkN5UBWXnFg18iXZzVSOwy4c5QDDzmHFN3ckl4=
Subject key identifier:   17:1D:B6:CF:74:E2:28:D4:59:CB:A0:4E:73:D8:C1:83:B3:9A:DB:DA
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584AB7B62472D5796CEAD48C8D00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1054a5ee-00e6-3efd-8710-b322e970ad2d.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     394437
IP address blocks:        205.196.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:24:72:d5:79:6c:ea:d4:8c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=4e36da91-fe85-4bb2-81a4-e13b7802c9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:5a:0e:a3:ae:ea:0c:04:d7:e0:dc:88:3f:
                    9c:0f:97:bd:66:df:a8:fb:60:03:2d:30:13:ba:d8:
                    15:36:54:a6:c3:98:9f:a2:ba:e3:85:b9:7e:1f:0a:
                    97:22:3b:76:03:6f:6e:2d:1a:36:9d:69:79:c3:36:
                    0d:d8:7a:8b:92:2b:68:f1:46:3f:0b:2c:d3:34:79:
                    78:cf:ca:ba:bb:62:63:e9:f6:1d:44:64:52:82:f9:
                    3d:5e:a7:e7:87:ee:58:4c:e8:85:77:64:e9:a8:73:
                    41:9b:42:70:a3:bc:cb:c9:4a:fe:1a:e6:a2:ae:00:
                    dd:36:b0:60:d3:9a:c1:8c:d1:39:9a:e9:d5:03:1e:
                    ea:c9:d8:59:28:32:ee:32:07:78:1e:8d:e2:59:2f:
                    97:74:ab:b3:2a:42:06:51:44:24:51:a4:db:b9:55:
                    51:7e:90:28:38:b7:49:82:20:cc:66:c0:a1:e7:9f:
                    00:3e:e6:5b:c3:06:ae:f1:3d:b0:64:13:6c:8e:97:
                    66:25:5c:a3:da:85:0e:9d:d8:8a:ca:9c:bf:38:ba:
                    51:1f:9e:a4:24:3c:bf:dc:13:ae:c7:04:8a:06:03:
                    04:f5:d9:5b:5f:ae:bc:96:e2:9d:73:c0:51:5c:53:
                    e3:1e:6a:a4:6b:d9:12:66:c0:da:91:eb:4c:0d:a4:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1D:B6:CF:74:E2:28:D4:59:CB:A0:4E:73:D8:C1:83:B3:9A:DB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1054a5ee-00e6-3efd-8710-b322e970ad2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:db:76:83:9e:40:e8:84:c9:f9:50:02:a2:62:55:45:5d:da:
         6d:a2:57:12:4a:3c:b6:f3:77:a9:eb:02:1a:9f:a4:73:b2:92:
         16:f0:81:ab:b7:72:51:3a:4a:39:79:6c:83:d5:d6:3e:08:14:
         2a:48:49:6e:58:cb:af:ae:57:50:ec:46:e7:2b:e4:0f:d7:c8:
         db:45:d5:44:1f:27:40:0e:ff:63:c7:e8:a6:95:d7:e8:11:57:
         6c:36:a5:b1:62:ec:b2:c2:44:32:cd:67:a3:15:77:b1:62:1f:
         10:6c:3e:c0:44:2d:c5:f1:e0:b8:26:9f:4f:57:dc:8f:1c:75:
         c9:ba:ab:dc:e5:e7:42:ab:a2:5f:ce:f5:ca:9d:b0:2b:e2:d1:
         d5:c0:25:3d:a1:32:bd:2c:55:0b:9c:2f:4a:bb:ae:b9:75:dd:
         2e:d0:a8:e1:e0:a4:5b:2d:3b:fb:24:a5:4c:d9:1f:b5:9b:82:
         cd:2b:c6:43:84:28:fa:cc:24:6d:eb:44:cb:9b:9b:aa:7e:4f:
         02:fd:44:16:55:7a:d5:b5:6e:d3:82:24:c8:74:59:f2:e9:67:
         1d:c3:00:d5:33:1b:d1:0b:2a:67:d1:7c:c1:21:0a:6d:a0:6d:
         19:89:62:c3:76:f2:4d:05:6e:de:14:51:0b:b0:7c:5d:55:e5:
         58:f0:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:00 2025 by rpki-client