Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa
File:                     a5813508-28da-316e-9e85-47818567b716.roa (raw, json)
Hash identifier:          c8wp4eFrkXjqetcSYxALI9VZ3yv9/uTU7FZsuWUcxsE=
Subject key identifier:   6C:AD:E8:15:0C:77:51:25:54:FA:DF:6C:67:AF:69:40:66:97:56:7C
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584AB4EB6E73A9723BB5E6766B40
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     25649
IP address blocks:        198.207.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6e:73:a9:72:3b:b5:e6:76:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6230ee0a-c0e8-4d8a-ae3a-ba9f9b35d8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:ec:48:fa:3b:90:c0:87:ec:36:ad:8b:e7:
                    c0:af:33:2a:60:02:72:41:4d:23:b6:0d:2b:3b:89:
                    41:c1:22:3f:c6:a6:07:63:1c:28:ed:be:fa:2c:de:
                    63:9f:ef:68:d1:24:c0:18:f3:c3:43:34:c3:ff:e9:
                    2c:02:cc:5f:98:98:cf:dc:b4:ec:36:81:ac:0f:94:
                    d3:73:6d:a7:86:f3:65:d1:14:42:24:f1:66:10:80:
                    1a:10:56:df:ae:0d:b2:be:cc:53:40:d7:59:9a:30:
                    7a:22:74:00:cc:b0:cf:1a:2b:f2:a2:73:71:16:20:
                    53:b5:5d:ed:93:4c:49:3f:80:5b:35:6d:c2:82:7b:
                    65:c4:fa:be:6a:db:07:19:4d:37:af:be:f9:b1:05:
                    aa:3f:96:36:5b:da:5a:5e:fe:a0:d1:68:10:3d:73:
                    1c:21:c0:09:7d:cc:45:d8:6c:88:18:5e:65:e6:37:
                    b6:59:75:d5:54:ec:cf:45:5b:85:8f:76:b6:2a:b5:
                    ac:9a:9e:b4:04:3d:b5:36:7d:5c:b8:8e:de:68:db:
                    cf:24:70:ac:e5:a6:36:d8:84:e4:4b:62:65:6d:81:
                    89:93:93:d2:ce:95:12:86:2c:94:c0:c3:57:72:3c:
                    01:66:31:5d:01:78:79:a2:82:ee:2b:58:3e:16:b6:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AD:E8:15:0C:77:51:25:54:FA:DF:6C:67:AF:69:40:66:97:56:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:4e:c4:cb:36:15:2d:32:ab:2e:10:94:7a:5a:a5:a1:51:
         ce:9d:bb:66:3c:e5:b8:43:d1:f4:d5:a2:7c:e8:1b:19:33:06:
         a4:aa:08:f2:dd:77:00:b6:f1:62:3f:b1:85:89:0b:d3:21:04:
         25:fe:a7:d2:6b:62:bd:1b:80:01:b1:88:c3:32:57:9c:b7:05:
         e0:09:a9:b5:dd:41:b1:0f:3c:04:13:38:cd:cc:8e:c1:9a:2d:
         39:ad:41:c3:72:78:92:c8:e1:56:61:53:d5:a7:55:e5:1c:6c:
         48:4d:7b:1e:81:67:95:ee:8a:ed:05:4f:d8:e0:ed:3a:9a:dd:
         35:7f:59:6b:12:cf:23:a3:64:82:29:61:59:30:5f:04:f0:53:
         45:49:47:49:ea:0f:08:08:9b:d7:4c:aa:19:22:d3:8a:22:10:
         83:5a:2a:ff:3f:65:29:bb:17:14:89:c1:5f:f0:8c:10:be:92:
         33:4b:f3:9b:c8:19:df:01:b6:67:27:30:72:f4:8c:e8:4c:9a:
         8c:3c:39:bd:50:73:4f:39:07:29:b4:c8:72:ce:c0:f1:8e:7b:
         ab:47:4f:de:e6:38:8d:eb:12:38:2e:20:cf:da:b8:3a:d7:6d:
         f5:96:d3:5c:60:b4:2a:d1:2d:d4:d1:23:dc:01:cd:e9:73:8e:
         b1:4e:8e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:18 2025 by rpki-client