Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa
File:                     6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa (raw, json)
Hash identifier:          WAs01l7ld2ZumCTgnTOC0Qc50ERkuN8l+i3WMzIjEJE=
Subject key identifier:   2F:95:96:5F:70:68:DE:D9:9E:A4:59:06:0A:74:A2:42:72:BC:B2:8E
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F4328584A9BCB6D0211636695BFF29C00
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     395807
IP address blocks:        199.60.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6d:02:11:63:66:95:bf:f2:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=5fe3760f-ad56-43f2-a15c-340ce8262e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:4f:63:3b:88:4d:38:52:61:82:24:4b:50:
                    bf:ea:5b:56:3d:12:fc:2a:f5:34:c2:fa:fa:81:ea:
                    03:ee:46:dd:9a:9d:c8:bd:fe:d0:13:bd:a5:5b:48:
                    6d:a2:69:3d:6d:ed:fb:5a:8b:f8:2e:60:ec:d5:44:
                    a3:f1:c5:8b:47:ae:20:04:92:d1:f6:00:76:62:67:
                    d6:b8:f8:bd:b2:15:b4:eb:09:a8:84:fb:4a:3a:39:
                    b3:aa:d4:79:01:66:ed:b5:8c:74:21:ed:29:93:39:
                    94:cd:06:ba:cb:ca:ee:de:91:20:b4:f5:c6:e0:2f:
                    93:61:0d:b7:36:8d:37:ab:76:21:bf:5e:56:90:73:
                    6e:cf:da:3b:f6:5c:91:0a:69:56:56:89:57:96:8d:
                    2e:ca:82:fd:b4:fc:26:14:0a:63:1e:d1:65:3f:e5:
                    57:e0:c2:27:27:ca:a7:76:f9:54:c2:87:db:ee:40:
                    b1:6f:99:47:ef:23:38:2a:62:14:44:40:2a:d6:da:
                    a0:18:67:94:d0:95:23:17:d8:b5:c5:fd:80:64:cb:
                    b8:f3:4e:f0:86:90:3c:d0:fa:04:63:50:00:5b:ca:
                    e5:ec:87:47:6b:29:a9:5e:5d:de:59:93:30:3f:d4:
                    10:e3:54:87:25:e2:63:27:61:c2:f7:cb:18:53:38:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:96:5F:70:68:DE:D9:9E:A4:59:06:0A:74:A2:42:72:BC:B2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:7e:3e:6e:4e:dd:1f:d4:4a:6d:dd:f5:89:0f:d3:a0:78:
         0e:a0:12:af:aa:b4:7c:7d:21:3a:72:b4:4f:80:56:74:04:97:
         f0:5e:16:be:7d:30:2a:2d:81:bc:eb:9e:47:11:2b:c3:6e:d9:
         eb:3a:f2:5f:4e:16:4a:e2:94:64:73:69:0b:6a:d6:84:ca:07:
         3c:25:78:a9:53:fd:8b:29:24:ae:bf:5d:82:90:cf:6b:1a:62:
         ba:a0:4f:96:a3:12:62:a3:53:2a:57:38:3c:12:4a:5d:6e:94:
         7a:d0:a9:4a:5d:bf:97:6a:62:3b:6b:5f:fe:1d:c4:99:4e:5a:
         7c:38:17:25:26:7e:90:e0:16:3b:94:4b:29:e6:9b:8f:c3:14:
         d0:cb:81:98:62:58:49:01:02:9e:40:4b:39:55:5b:d7:bc:89:
         6c:e0:93:c2:cf:96:cb:4f:39:d8:cb:ea:c4:f3:69:24:4c:03:
         7a:8a:9b:2b:3d:3a:12:1c:a4:72:90:ef:06:cc:43:55:96:2a:
         df:94:6d:54:a2:64:c2:68:e5:78:ae:bf:2d:1b:25:ad:5e:f0:
         cf:aa:2f:8f:51:d3:c6:ac:64:63:ae:fe:eb:b5:8d:02:a0:4c:
         ba:63:08:5d:03:21:43:8a:0c:d1:6a:b4:3c:89:88:a2:23:1f:
         61:7d:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:16 2025 by rpki-client