Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
File:                     4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json)
Hash identifier:          I+qL/6Cfd3lGD0JdVo0ttPW4PQE59hYJk72ghtvcWg0=
Subject key identifier:   9D:40:E6:A0:52:9C:F5:3C:D0:3D:66:21:7A:83:E0:69:99:84:50:69
Certificate issuer:       /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial:       010D0C9F4328584AB650D99761B412B964CE9790
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        192.175.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d9:97:61:b4:12:b9:64:ce:97:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9b38d138-c993-433a-8857-fb7841cabcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:93:4f:8c:e8:3c:63:81:d4:a3:e2:af:28:
                    83:95:b0:0b:c5:af:a8:fa:89:40:de:fa:5d:8e:a6:
                    1a:9c:91:94:aa:5c:4e:e7:29:db:c8:88:b8:96:f7:
                    6d:35:29:e7:c5:d7:18:43:c6:f6:ea:c7:3f:29:4f:
                    11:6f:2f:e0:b5:e5:77:d0:38:5a:6d:08:2b:a7:5d:
                    3e:f0:32:95:de:c1:87:02:3f:52:33:48:63:09:64:
                    eb:20:af:88:65:76:7c:f7:d9:c2:61:aa:9c:94:6c:
                    e0:d3:89:fc:65:29:e0:f3:f8:a0:70:5e:e6:0a:50:
                    c0:d7:88:7a:dd:c4:7d:75:1f:9e:54:52:92:1d:ec:
                    f8:0a:02:39:93:7a:22:a2:ac:d3:0d:62:dc:10:15:
                    3f:f3:e9:e2:a1:ac:32:83:9e:76:7f:27:9b:94:0e:
                    be:f3:f0:73:11:35:d1:b8:93:34:28:c6:97:31:13:
                    f6:d0:91:a7:60:a4:e6:a9:2c:23:9e:22:bb:21:fd:
                    d2:d9:e3:49:9c:cc:23:71:57:ec:88:c4:b7:50:7f:
                    91:76:f2:19:09:e7:69:a8:57:6f:aa:a3:cc:5c:f3:
                    d6:5f:e5:0d:9e:b6:37:ee:67:a1:57:a9:71:90:b4:
                    6f:af:c6:1a:4a:be:d4:a8:5a:3b:51:8a:7b:ec:54:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:40:E6:A0:52:9C:F5:3C:D0:3D:66:21:7A:83:E0:69:99:84:50:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl

            X509v3 Authority Key Identifier:
                keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.175.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:e5:55:7a:d1:3d:d5:ef:98:11:85:d0:73:38:b6:64:cb:
         78:e2:d7:2f:f9:c4:1d:04:11:19:34:12:77:9c:ff:bd:22:74:
         6a:65:85:37:2b:ba:23:46:f4:ba:e6:a7:32:0e:17:2b:d8:39:
         36:8b:7b:ba:2a:cd:f9:55:17:54:7d:91:fb:7a:81:50:05:34:
         42:8a:f5:19:ca:ad:03:77:ec:96:e9:fd:3e:68:de:bd:66:0d:
         19:e7:01:b5:f3:26:b7:f3:84:05:9a:30:8c:c9:24:10:c8:9f:
         2d:00:26:84:69:71:8c:a7:af:9f:2d:13:d1:81:90:16:d3:f7:
         98:e5:8c:53:eb:67:4c:d0:b8:d8:f0:6f:9d:de:d5:d6:42:3a:
         08:7c:bf:ce:db:77:18:77:2e:af:be:c1:47:34:dd:8e:48:35:
         cf:2d:20:72:f5:92:49:7c:55:ac:0e:5b:2e:e0:ef:07:b3:72:
         47:19:16:be:ae:b3:fe:57:37:96:48:5a:78:35:41:5d:a0:f8:
         6e:62:a6:f6:b2:15:80:32:00:89:e9:ff:68:20:03:7d:f5:f6:
         9d:68:ef:97:ee:d1:c9:b3:25:bb:5b:e9:2c:0a:7f:51:13:e3:
         cb:5a:a5:15:6e:7b:8c:a6:d6:36:26:f8:e1:93:47:29:92:55:
         ff:bf:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:31 2025 by rpki-client