Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa
File:                     7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa (raw, json)
Hash identifier:          takUvBhSb1mhT9GVVM8VhGuYhpuhaBGVWx5TYY7r78A=
Subject key identifier:   91:0A:B5:9B:45:0E:05:3C:5A:7D:30:3E:C5:A4:14:B2:F0:4A:9B:B3
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650D35C00245AF4BF3A6FC0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30133
IP address blocks:        192.228.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d3:5c:00:24:5a:f4:bf:3a:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=81c242d8-2fad-4005-8058-cc630b396da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:64:db:49:53:10:37:0f:9b:17:ca:cd:c1:
                    8c:11:95:39:b7:23:19:52:eb:f1:e4:28:db:f0:3b:
                    ea:59:c9:a2:c4:2b:ce:fa:81:da:10:62:1a:c5:f6:
                    e3:cb:af:46:25:52:a2:35:8d:0b:6f:cc:37:86:f7:
                    aa:87:95:a9:0b:d6:b7:c8:21:41:88:7b:ba:39:68:
                    14:39:29:81:f1:33:f2:82:a1:ac:74:5a:80:89:c0:
                    38:6e:1a:04:96:f3:dc:56:ce:c1:86:75:e8:cb:e6:
                    1a:91:99:5d:f6:6e:93:02:94:cf:8d:e9:eb:8b:fc:
                    c3:6d:09:92:aa:0f:e2:75:b0:75:e7:e8:dc:c9:9c:
                    f8:b9:18:dc:91:26:22:6d:72:59:a7:46:75:3b:08:
                    8d:ff:40:08:67:43:88:6f:1a:3f:b3:2f:2f:2c:e2:
                    5b:8a:21:6c:d8:e4:50:0c:fb:f1:52:c1:bc:fd:75:
                    f9:2b:f9:38:af:4f:fe:39:80:63:36:b3:ee:fb:68:
                    55:1b:bb:9f:ad:95:5f:33:4e:99:a4:af:68:2c:9f:
                    f6:14:80:c1:40:7d:4f:90:68:02:99:64:93:f8:bd:
                    33:c5:aa:ab:4d:23:7b:24:46:1d:2d:cd:e6:ed:06:
                    c1:f3:a1:c5:5d:46:c2:6d:f1:9f:07:2f:d5:f4:46:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:B5:9B:45:0E:05:3C:5A:7D:30:3E:C5:A4:14:B2:F0:4A:9B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:f5:e5:f4:9b:ed:7f:a6:ba:3f:78:fb:9b:82:77:07:34:
         67:06:7d:74:c0:f4:6f:9b:4e:38:eb:b6:64:28:61:2c:f8:b6:
         4b:f2:59:15:69:13:3f:64:76:e9:c0:9d:9b:c6:f2:d2:94:e9:
         bc:25:ed:32:a5:d2:a4:95:96:8f:22:68:54:dc:ca:1d:59:ed:
         57:f7:a7:a3:b4:f8:56:b7:94:b9:2b:1e:9c:1f:94:86:1f:15:
         d9:7e:f8:e6:e0:c8:c1:10:bb:fc:3b:4d:f0:ae:ec:1f:b0:3a:
         0d:57:f4:ed:ef:68:72:a4:b8:d7:76:c7:04:b0:66:1f:05:af:
         c7:ec:09:6a:11:bb:d2:89:25:a2:62:ba:ee:90:fe:89:d7:ec:
         5e:68:3c:ab:92:85:fd:73:43:eb:dc:b1:70:0a:8c:1f:8e:20:
         f4:49:b1:43:4a:1a:b9:13:22:1f:34:fe:e0:e6:0c:38:55:82:
         12:b1:b4:27:ae:03:4c:f8:2f:02:7d:c4:3f:2e:eb:ce:25:71:
         ae:b2:89:3f:75:06:3c:e7:57:d7:03:ec:82:0b:10:a0:d6:6f:
         66:0e:98:8d:81:48:15:8d:e0:91:db:06:2a:e8:50:15:62:5d:
         ec:63:b0:42:fc:86:03:86:c5:89:59:84:66:b7:3a:bb:84:19:
         f7:4a:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:58 2025 by rpki-client