Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa
File:                     8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json)
Hash identifier:          vT9nOYQUs+MyjblJ7acX4mG6gW7CSvyycvEKAr8vIbI=
Subject key identifier:   F5:C7:2B:C7:5D:CF:A3:38:E7:38:67:3D:13:EA:5C:AB:02:DB:6A:08
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584AA1621C127FC9FC3C22D01F24
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     398395
IP address blocks:        199.253.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:1c:12:7f:c9:fc:3c:22:d0:1f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=972ba0ae-f62c-4fc9-adc7-1417857b113d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:82:d8:04:bf:e0:c5:ec:bf:10:24:b0:43:
                    d0:d5:3c:23:7b:25:03:7f:1c:2c:4f:04:4a:2b:51:
                    39:0c:a4:d7:d0:22:35:a3:81:d6:19:b7:10:2a:cd:
                    2b:fe:03:32:53:b8:2c:8d:ea:68:88:65:3c:f1:52:
                    13:65:79:5a:0d:6a:30:01:eb:37:31:2b:6c:ad:f0:
                    15:f7:6b:01:65:b2:05:e9:16:4e:6f:f4:aa:72:28:
                    58:d7:df:21:84:ad:ca:33:1d:4f:77:dd:68:cf:79:
                    62:a3:d1:81:7e:24:75:ee:ad:39:cd:37:e6:23:4b:
                    5f:9f:a9:94:7b:46:10:4c:a6:b5:fc:68:a5:3c:2e:
                    ed:bb:61:ae:2a:70:b3:f2:a5:70:7a:af:04:95:e3:
                    61:24:a6:86:46:ca:29:84:0e:52:70:3a:64:d8:b7:
                    f7:4e:5d:f1:08:da:67:73:b6:92:01:45:18:3c:8c:
                    d7:76:1d:fa:e5:05:d4:aa:39:48:68:39:93:be:46:
                    6c:d2:48:7e:d4:cc:b4:cf:bb:8a:11:09:d4:87:98:
                    ff:1e:86:db:aa:87:14:ca:e5:1a:47:d3:69:c7:6b:
                    bb:a9:ba:b9:0f:4b:36:e6:a8:14:9c:ac:5a:bd:67:
                    a6:67:72:27:22:ef:60:ee:c3:8a:00:d9:79:5b:75:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:2B:C7:5D:CF:A3:38:E7:38:67:3D:13:EA:5C:AB:02:DB:6A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:4a:0f:fe:39:41:d9:0b:18:f8:f3:e0:21:0e:64:35:bb:
         09:61:1e:73:74:ea:d8:ed:73:b2:f2:64:5b:0d:2a:f0:bd:fb:
         d6:15:c5:e8:5b:6a:3b:b1:85:f9:c2:3a:aa:9d:84:22:8c:78:
         ae:6a:0b:58:61:4a:01:e0:5d:ac:60:8b:54:78:e2:10:3f:52:
         95:c8:a8:81:28:29:2a:73:1a:31:ad:64:2b:21:89:5f:9e:12:
         fc:3c:2b:b3:d2:be:92:62:61:88:ce:87:a7:2b:16:cd:e1:05:
         04:f8:80:11:41:32:bc:d0:47:85:c9:c7:76:50:de:bb:51:58:
         99:73:27:0a:7b:6b:1f:3f:3d:d4:b7:79:27:c3:29:77:bc:ed:
         4d:ff:18:ea:2c:dc:3a:46:b7:f2:5b:f5:68:f3:4c:00:46:89:
         17:7e:1e:86:45:bf:55:f4:58:42:04:90:a3:53:58:9a:b4:6a:
         be:1b:a1:be:42:20:07:d8:0a:d8:b5:46:4e:c7:3d:67:36:26:
         75:ad:54:61:f1:e5:60:c1:0d:bf:be:40:4a:37:eb:fe:c6:2d:
         9a:32:08:98:a7:b8:b3:87:bd:ee:10:3c:0a:83:66:e0:2f:bf:
         a6:14:88:86:34:cc:56:15:24:6b:b9:53:b9:30:21:c7:dd:75:
         ae:29:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:41 2025 by rpki-client