Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/c1b79bca-e010-326c-84ab-9dac09578d88.roa
File:                     c1b79bca-e010-326c-84ab-9dac09578d88.roa (raw, json)
Hash identifier:          kPqwxgrWzKT39hzIUmTLOahQA0UKiPGBz7y9+JHTX4I=
Subject key identifier:   DB:28:DA:66:3E:B1:82:CA:E0:32:B1:03:07:84:16:3C:3B:B9:18:55
Certificate issuer:       /CN=fca378e8-d583-42e8-ad97-ea7b6d731d7c
Certificate serial:       010D0C9F4328584AB91B9190588C9F87B9135100
Authority key identifier: 36:5E:2C:17:D2:87:9C:44:1C:E7:57:80:F4:7D:34:2D:5A:B9:06:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/c1b79bca-e010-326c-84ab-9dac09578d88.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     5723
IP address blocks:        198.57.32.0/21 maxlen: 24
                          198.57.40.0/22 maxlen: 24
                          204.124.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/fca378e8-d583-42e8-ad97-ea7b6d731d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/fca378e8-d583-42e8-ad97-ea7b6d731d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:91:90:58:8c:9f:87:b9:13:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca378e8-d583-42e8-ad97-ea7b6d731d7c
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=bf16d158-1044-48de-9fb4-e939373bc0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:aa:34:8f:27:78:fb:53:fc:d7:3c:ab:96:
                    5c:fa:96:d0:c2:8a:aa:9c:a0:60:16:48:34:f9:20:
                    77:82:08:ab:33:26:30:79:e4:2a:f5:c1:32:c7:87:
                    03:09:5e:c3:bd:51:fe:ab:10:49:43:c2:b7:d6:b3:
                    54:0f:a8:1c:fa:6f:9e:f9:51:22:58:cf:46:e6:9e:
                    4f:a6:94:17:15:48:a0:f2:e1:52:c0:c2:5d:77:96:
                    fb:1a:28:f8:dd:a4:3a:c9:5a:94:44:b7:36:d5:e9:
                    a0:d2:c6:02:70:ab:c2:ce:b1:35:05:2a:5a:a1:1d:
                    96:96:ae:fd:20:ee:a6:98:6b:04:17:e4:a2:5d:64:
                    03:e2:9a:94:8a:19:85:01:4f:e7:d9:43:73:6d:71:
                    bf:09:04:d5:7a:b8:ed:ce:b8:8f:da:f7:9e:81:8d:
                    66:25:95:c8:55:d8:0f:a1:12:a0:a8:64:6f:31:29:
                    d3:5e:35:b7:ea:8e:eb:a2:f6:7d:0c:f5:d3:64:15:
                    1b:65:65:07:ec:2b:89:41:a5:ef:ae:6c:a7:b6:4f:
                    91:75:f5:bf:99:b4:a2:2f:04:33:9e:85:43:6f:75:
                    62:bf:33:8e:03:1b:79:0c:09:16:e9:48:53:a9:e1:
                    64:59:a0:68:83:87:c2:4e:ac:77:bb:5b:d0:bf:3b:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:DA:66:3E:B1:82:CA:E0:32:B1:03:07:84:16:3C:3B:B9:18:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/c1b79bca-e010-326c-84ab-9dac09578d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/fca378e8-d583-42e8-ad97-ea7b6d731d7c.crl

            X509v3 Authority Key Identifier:
                keyid:36:5E:2C:17:D2:87:9C:44:1C:E7:57:80:F4:7D:34:2D:5A:B9:06:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.57.32.0-198.57.43.255
                  204.124.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:55:a2:1f:d1:8e:1b:78:07:bb:b1:98:a1:15:0e:c6:2e:
         59:92:5b:ef:7b:22:09:44:7d:fb:5c:a6:72:79:cd:a0:66:52:
         2d:86:75:cd:bf:43:0e:a9:26:ec:00:d2:42:d6:d5:ce:fc:c7:
         1f:45:43:16:6c:78:f8:86:74:dd:84:2b:66:a0:68:3d:c9:23:
         c9:1c:f2:c4:e6:62:1b:21:e9:11:f5:79:ae:65:bd:54:ba:df:
         16:a7:91:8d:18:01:0d:52:27:ff:25:8b:da:58:8f:ec:7e:1d:
         0e:53:44:62:73:71:6e:e2:2d:f7:2f:b4:40:00:b4:75:66:ba:
         69:24:03:22:14:80:1c:22:c2:ef:10:49:91:14:60:22:1b:59:
         15:48:02:a2:a0:09:d3:17:29:61:f9:9c:ea:e0:cf:a0:f0:6f:
         5b:36:20:7d:0a:6e:54:f8:3c:9a:ba:f3:0c:eb:21:03:0a:b3:
         e3:8a:26:d4:c7:80:f1:58:50:f6:86:54:52:f9:be:1c:12:f9:
         e3:26:94:8b:e8:88:df:02:22:f4:d5:c9:8f:7a:df:55:b5:57:
         4b:27:04:ea:8d:04:6c:5f:25:29:82:88:44:d1:83:42:a3:f1:
         52:1a:32:da:bf:34:0b:37:51:0b:4f:24:35:97:ab:fe:79:86:
         79:bb:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:07 2025 by rpki-client