Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/972bed62-b801-345d-95ff-235bdb834957.roa
File:                     972bed62-b801-345d-95ff-235bdb834957.roa (raw, json)
Hash identifier:          OediyPDDRjf47uN1aRfKtAYCTP7SFrxCw5Ca3ZB4NT0=
Subject key identifier:   B4:5C:4C:03:3F:2A:B6:8B:9F:AF:3D:36:64:BE:24:DB:0A:C3:48:4C
Certificate issuer:       /CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Certificate serial:       010D0C9F4328584A96368AA9FE6242BD0BC6B780
Authority key identifier: D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/972bed62-b801-345d-95ff-235bdb834957.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     20419
IP address blocks:        192.132.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8a:a9:fe:62:42:bd:0b:c6:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=a7afecaf-606f-4fe6-95d0-8d0792bf6a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:57:63:2f:3e:10:f2:07:13:e7:23:bb:ef:
                    da:32:71:50:d6:6f:18:b2:40:8b:47:2c:2a:dc:07:
                    86:86:11:e9:67:56:81:96:18:e0:65:91:d4:55:d8:
                    15:0a:55:c2:a1:51:c7:b1:e4:e3:2e:c5:70:c1:e2:
                    05:2f:f4:76:31:44:cf:45:14:d4:7a:d0:00:77:2d:
                    6a:98:59:55:3f:16:a7:70:60:09:3e:0e:06:4f:9f:
                    bf:d7:97:d0:ed:14:81:8b:b8:d4:ed:ec:df:7f:82:
                    8a:7c:f5:ea:d1:be:18:6b:b1:dd:c0:ff:20:62:e7:
                    4a:81:8f:fc:70:23:28:d8:32:b5:58:bd:d6:de:cd:
                    38:88:92:30:ca:1d:29:09:7b:60:97:01:71:c6:ba:
                    0a:c6:55:63:bb:8b:41:b1:bb:2c:8d:e3:96:73:8e:
                    ce:15:75:0c:17:a2:08:0c:fa:b2:a8:d6:fa:59:a6:
                    ae:30:8a:93:89:f1:bf:77:e0:e6:1c:eb:99:87:e2:
                    34:52:8f:b1:e6:6c:c1:ac:80:2a:0f:99:83:ec:10:
                    65:74:76:e8:45:ed:03:26:16:3b:b7:d2:3d:f9:04:
                    74:4d:2c:61:5b:5a:e2:3e:1c:3d:eb:c9:e8:66:4d:
                    30:22:25:af:ff:76:07:47:ca:67:f7:ed:5b:ab:a5:
                    42:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5C:4C:03:3F:2A:B6:8B:9F:AF:3D:36:64:BE:24:DB:0A:C3:48:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/972bed62-b801-345d-95ff-235bdb834957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl

            X509v3 Authority Key Identifier:
                keyid:D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ff:a0:77:38:54:95:0a:f1:04:7f:b3:77:91:0e:85:8d:9c:
         db:e9:e9:4c:a7:8d:47:7f:6e:f9:64:1d:53:76:83:aa:02:4e:
         2e:eb:07:ef:6b:dd:6a:64:ff:95:ab:9d:c4:5a:16:29:21:c6:
         1c:00:41:e9:1b:c3:23:ac:99:cd:56:45:1f:30:df:06:8c:d1:
         8f:c6:38:5c:c7:5d:a3:00:af:9a:d9:23:4d:ac:d2:67:a0:3e:
         f2:05:32:31:68:6c:92:81:44:9e:5d:e7:30:09:51:90:8d:e1:
         06:15:2c:46:ce:97:b0:d6:4b:61:00:9f:69:ab:cc:dd:01:c0:
         95:5b:f0:5e:b9:db:30:f6:8c:c1:2a:69:64:6e:7b:8d:62:57:
         cb:b7:ec:9d:49:2a:34:05:de:ce:23:34:bb:5e:28:c5:f3:3e:
         2d:38:c7:f5:4a:1e:a0:a4:49:9c:56:fa:ed:26:77:c0:06:6e:
         9d:52:b9:50:34:b9:f8:52:21:04:f3:2d:aa:c8:4b:2e:df:9f:
         62:ee:6c:db:30:96:c4:da:50:0f:6a:ca:8f:f3:f5:07:c9:0d:
         7a:2c:5d:5d:c0:c8:78:31:6f:c4:cd:48:6e:26:cb:27:89:0e:
         65:00:3b:48:f5:1c:9b:62:af:c2:9b:11:85:8d:8b:ed:64:f4:
         82:99:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:54 2025 by rpki-client