Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa
File:                     3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa (raw, json)
Hash identifier:          uh1QXrRIkNukk8rPj+2e1SG6w97XsMohcHgH4ssG7kc=
Subject key identifier:   E5:7C:CE:45:58:E8:5B:ED:33:ED:ED:6B:9E:26:D5:C3:B4:66:61:06
Certificate issuer:       /CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
Certificate serial:       010D0C9F4328584A90A0BA32A2F23FDED001CD00
Authority key identifier: 68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     22840
IP address blocks:        198.245.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ba:32:a2:f2:3f:de:d0:01:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=bb94afa0-11dd-4174-8722-9a4d19a1a381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:14:1a:1f:2a:f9:d1:92:74:52:60:9f:17:
                    a2:21:b0:3a:46:5f:e2:86:0b:73:d5:69:27:93:53:
                    a6:7c:b3:e6:d0:b5:ff:4f:43:3d:8c:d0:3a:16:8f:
                    92:34:b6:ef:17:83:8d:4e:c7:36:03:56:da:f3:db:
                    5a:9e:58:a2:7c:d9:f2:af:b6:a7:13:fc:9b:1c:8c:
                    c2:d9:f8:bb:3c:fe:98:37:ff:20:60:15:52:b4:fc:
                    f2:60:71:4c:b5:c8:7c:38:3b:de:a9:85:fe:58:09:
                    73:fb:5b:c5:02:25:e3:d9:91:36:eb:ec:34:f7:17:
                    1d:49:3f:cd:9d:8d:53:6d:3e:dd:f8:f0:24:af:17:
                    b7:2d:e6:85:06:4f:5c:30:5a:63:22:2b:cc:54:bd:
                    99:e3:e5:9e:46:a2:62:64:dc:7b:77:3a:62:8d:a3:
                    2a:e4:9f:df:42:44:7e:2f:4a:83:f8:2d:81:f2:ee:
                    82:7b:47:44:df:2f:bf:f4:ff:4d:d3:20:90:2f:f9:
                    5e:c2:56:e0:fd:9a:40:53:84:76:ee:25:c6:7a:6f:
                    8a:15:7f:69:c0:ed:4c:b3:a8:84:54:18:00:b0:16:
                    78:0e:fa:de:e0:42:50:71:53:d6:98:ae:7d:77:51:
                    42:54:cb:3e:b3:d0:38:13:46:61:ea:72:ac:75:b1:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7C:CE:45:58:E8:5B:ED:33:ED:ED:6B:9E:26:D5:C3:B4:66:61:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl

            X509v3 Authority Key Identifier:
                keyid:68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:1c:1d:bf:5a:4e:f6:aa:d3:00:16:4e:99:2c:55:57:5c:
         26:c2:75:2c:88:67:52:b3:ce:69:38:9e:9f:42:77:a4:c8:a5:
         fa:8b:24:53:d1:58:96:38:3d:07:4b:d4:21:5b:d4:77:39:5c:
         b6:2c:93:ec:2c:36:19:8f:68:0c:d0:8f:bd:d1:92:29:ff:52:
         36:8e:7f:01:ad:d8:f7:2e:5d:86:cc:c9:eb:f5:bf:ab:bf:ae:
         19:a1:31:3b:b9:04:ee:93:b8:17:06:00:13:b6:d3:ea:02:1e:
         f3:b9:79:ff:4d:be:22:c7:a7:27:4a:25:60:aa:95:d7:eb:8f:
         d5:df:3c:8e:eb:72:84:c4:99:1d:2d:f0:f3:17:d0:f0:43:d8:
         1e:9f:11:fb:37:a3:a4:1b:82:80:2e:4b:27:09:d5:8c:64:a6:
         ca:56:97:45:2a:e5:ac:d7:af:15:a6:ff:9f:fc:6a:a5:b7:bf:
         7c:53:50:72:f5:f2:52:dc:ad:d7:14:e6:fd:70:d7:a0:01:96:
         8e:8c:83:74:0c:27:80:e7:7c:14:b2:b5:e5:03:df:c7:5f:31:
         1d:80:b2:a2:af:d4:55:0f:f3:ee:9c:b4:bf:4e:33:f9:77:68:
         e2:72:ac:f5:48:c8:45:1c:3b:00:f3:a0:ff:a4:9e:78:e0:0e:
         ef:b4:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:06 2025 by rpki-client