Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa
File:                     ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa (raw, json)
Hash identifier:          l+cYuXZrjQSQCmndBwSBjphoR65umU4ndekkB1ibEjU=
Subject key identifier:   D2:C6:AC:E2:88:11:AC:8A:89:8C:7B:24:5B:65:97:2A:B2:AF:67:48
Certificate issuer:       /CN=92423726-3299-41c6-ba87-4e50313b1db9
Certificate serial:       010D0C9F4328584AB4EB6DEEE0A4105F847B4D80
Authority key identifier: 87:A9:5F:4F:27:C4:9A:63:F1:5E:69:98:38:10:DB:CA:DE:85:74:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     17117
IP address blocks:        192.197.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6d:ee:e0:a4:10:5f:84:7b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92423726-3299-41c6-ba87-4e50313b1db9
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6eee349b-fb1f-4462-bf10-7f7125165803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:fe:70:cd:98:bc:43:65:b2:84:1d:4b:a9:
                    c0:f9:ea:14:ec:6e:3e:e4:2a:a5:2b:b1:45:76:7e:
                    95:03:41:4e:21:cf:cc:4f:d5:6c:6f:f1:14:a5:f2:
                    d4:87:2a:1b:63:4a:50:37:01:c9:54:a2:e9:62:67:
                    33:5d:5c:e1:7b:c8:96:18:9b:43:45:a6:49:47:0f:
                    7b:d7:98:7e:55:db:f2:84:e5:39:e6:b1:b6:02:91:
                    d1:79:57:1e:b7:85:9f:e6:f1:47:be:d5:9c:2c:71:
                    43:b7:b0:97:b5:9c:37:49:48:6c:32:d7:db:73:46:
                    a4:16:ff:8c:a0:91:16:6b:ed:09:63:d2:75:3f:91:
                    fc:86:3a:30:54:6c:80:f9:c1:5b:d5:85:8e:dd:d4:
                    ab:4f:6a:f0:9c:47:ce:b8:36:e1:2f:c6:a5:6e:7b:
                    f2:76:8c:89:3a:97:52:ba:55:fd:60:96:e2:c2:eb:
                    c1:91:33:13:11:41:c8:44:2d:6d:91:16:bc:c4:9e:
                    18:a8:ac:c7:00:ae:a8:25:90:f6:1c:42:45:3d:00:
                    80:63:9a:6e:9c:e3:af:d5:38:67:a7:eb:a8:73:0f:
                    5f:80:d2:f4:91:fa:f0:75:b7:e7:f9:04:70:0c:80:
                    b5:2d:a0:9f:ed:8b:a7:12:48:6c:ec:0e:75:13:86:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C6:AC:E2:88:11:AC:8A:89:8C:7B:24:5B:65:97:2A:B2:AF:67:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/ffda6e22-afe0-3ee5-b3da-845563c0e9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.crl

            X509v3 Authority Key Identifier:
                keyid:87:A9:5F:4F:27:C4:9A:63:F1:5E:69:98:38:10:DB:CA:DE:85:74:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:63:a2:9d:e3:dd:0e:c6:8c:89:1a:9c:4e:6a:32:12:40:
         1b:c4:cc:e8:df:6f:b5:2e:80:0d:7d:c3:70:7f:cd:f4:cf:a1:
         40:89:53:12:ce:8f:f3:64:fa:1a:76:83:d6:d1:5d:c1:33:c3:
         dc:e6:1d:f9:c7:65:82:59:fe:0a:38:cd:f4:08:de:10:d5:76:
         e4:96:41:6f:f2:29:01:f0:6b:8d:c8:b2:ac:ab:e3:2b:d3:04:
         16:20:df:25:6c:f6:57:b7:ce:3c:a5:bb:ae:85:65:20:03:3d:
         ba:96:22:90:7f:dc:2f:02:20:bc:d0:e1:4a:75:3f:82:15:c0:
         a2:44:4f:e5:37:e2:77:51:aa:4a:9a:aa:b6:da:e7:a8:24:df:
         cc:5b:36:48:11:b7:a8:8a:c7:2b:6d:47:50:e0:18:33:0e:47:
         0c:0f:e9:e2:0e:f0:17:b5:e3:bc:d7:e9:4e:b4:dd:54:6c:be:
         c2:36:78:24:f0:42:75:fa:3d:80:d5:a2:82:ec:bf:2d:50:cc:
         0e:63:96:6a:26:70:9a:0b:3f:14:96:f8:99:68:38:e7:39:b1:
         4e:2c:9a:d6:99:ce:50:6c:23:dd:d0:68:2f:8e:7f:9b:59:6b:
         13:d2:07:f6:0c:bb:a9:5c:51:44:f9:77:81:9d:78:6b:f5:f2:
         50:83:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:58 2025 by rpki-client