Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/1897cbad-ffa3-3b05-8005-74e02dea96c4.roa
File:                     1897cbad-ffa3-3b05-8005-74e02dea96c4.roa (raw, json)
Hash identifier:          lbWL/j+VibPVurUXQcWrR5aexmYZ8E+e+x5ovWFfdMw=
Subject key identifier:   EA:65:E6:5F:55:14:1B:B4:9B:16:4C:B7:4F:A7:29:8E:D2:B2:9B:41
Certificate issuer:       /CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
Certificate serial:       010D0C9F4328584A96368B73192E2090DE5D8000
Authority key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/1897cbad-ffa3-3b05-8005-74e02dea96c4.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        199.34.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8b:73:19:2e:20:90:de:5d:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=65b45665-1540-453a-a23d-8cd5995e8498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:44:73:96:a9:3e:23:26:97:f8:86:d3:c6:
                    c6:57:00:01:e7:3d:c0:25:ab:9e:3e:0f:31:a4:e3:
                    51:fa:ea:62:3d:ec:17:d3:d8:61:a5:5c:fd:69:55:
                    f3:76:2b:40:73:73:51:9e:c8:6a:a2:c1:34:6b:88:
                    57:b5:21:21:45:12:b6:1b:ad:78:79:2a:0f:d7:46:
                    75:8b:8e:a1:21:b9:f1:41:05:ff:eb:3e:a5:e9:8c:
                    65:28:13:48:f1:c4:83:d8:9e:d4:66:ef:d6:71:79:
                    7a:ee:dd:45:e4:69:1d:b6:a1:05:e0:c1:58:f5:50:
                    59:6f:69:9c:33:03:ff:bd:9f:fe:41:f4:d5:e4:b5:
                    47:2c:68:05:4c:5f:4d:89:d7:fd:33:a0:d2:5a:5a:
                    33:cf:8f:52:a6:ca:5f:0f:d8:82:2a:8a:47:6e:87:
                    5c:b3:4a:f8:f0:09:ba:30:47:90:cc:2f:bb:08:b8:
                    ef:31:42:82:64:09:79:ff:5e:65:87:0e:d0:f5:a5:
                    e0:e0:a0:97:96:4d:c7:b5:a8:86:ee:85:b6:88:51:
                    18:67:67:d0:64:39:8c:ba:48:c9:e6:df:9b:d4:1d:
                    f2:4c:19:8a:b9:e2:38:ca:c3:5e:03:4e:90:95:2f:
                    eb:07:cc:f9:59:1b:d4:fc:6a:8e:d7:3e:59:9c:bb:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:65:E6:5F:55:14:1B:B4:9B:16:4C:B7:4F:A7:29:8E:D2:B2:9B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/1897cbad-ffa3-3b05-8005-74e02dea96c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:cf:f7:9f:8a:4c:2d:e5:80:fa:fa:1e:2d:dd:33:86:e6:
         0d:2e:86:cd:30:54:98:c7:b6:7e:54:e3:a1:9b:33:4b:42:e8:
         73:4a:c7:55:f9:7c:88:81:6a:eb:be:f3:4c:2c:72:f3:80:36:
         8d:c1:de:2a:61:c0:b2:a7:00:4f:a0:32:e4:d0:6a:54:7b:0b:
         4d:d2:25:79:de:69:d3:88:ab:8e:30:3b:15:84:c7:4c:2d:20:
         38:4d:7c:64:ad:75:2d:c3:b3:14:2f:69:1c:06:b3:c1:a5:15:
         78:83:be:8b:0a:2e:16:50:81:c4:4d:17:71:00:ff:94:a7:7a:
         66:09:44:45:5e:20:6d:fc:32:fa:9c:57:ca:7b:d5:66:87:ad:
         0c:69:f2:0d:8a:51:80:33:4d:26:30:09:52:8d:2f:94:5f:54:
         71:fc:72:03:c5:db:19:16:96:e9:ac:86:a2:1c:90:2e:2c:b3:
         28:e8:d8:a4:43:9f:12:fa:02:ed:be:19:9c:51:63:14:4b:56:
         e9:e2:05:ef:ac:65:07:76:f7:93:c3:38:0c:2d:ce:8d:b4:08:
         a2:e9:c3:4f:f6:19:64:93:b8:7a:32:37:13:31:98:fa:08:db:
         76:f4:7c:c5:61:4d:d6:79:02:d3:b2:bc:5b:3c:4b:0d:4e:3d:
         b5:bf:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:07 2025 by rpki-client