Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
File:                     93af5d7f-145a-3b75-9635-bd780078b94f.roa (raw, json)
Hash identifier:          YnjEAINo1JscASbDe47W6cXuH0yx8k5omQ9erCL0weM=
Subject key identifier:   90:09:B5:85:51:3E:49:96:9D:FF:EB:AE:86:EE:10:CA:76:D3:26:D6
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F4328584AA160C88983EFE319E22DD300
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     25830
IP address blocks:        199.195.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:c8:89:83:ef:e3:19:e2:2d:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=454cf4e4-2d2c-4f85-9ed3-d1ab2745343e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:74:53:65:b1:0c:a5:bd:34:06:c5:cf:3c:
                    a3:ad:8d:22:04:99:02:a5:bf:3c:7b:82:4d:8a:98:
                    4d:f7:92:7d:76:3d:e0:06:d0:8b:74:31:85:2e:98:
                    de:99:db:2f:6c:81:ee:b8:79:74:36:9c:86:a7:12:
                    91:fd:0b:67:85:7b:80:dc:13:74:d5:0b:56:e8:6e:
                    4e:fa:b6:b1:18:0b:86:61:0b:ec:d9:6b:00:85:fb:
                    86:15:f8:03:e4:3c:a0:62:3a:ef:14:3a:c8:de:30:
                    f7:84:0b:38:a2:8a:12:66:ac:ad:aa:a4:0c:57:44:
                    97:c2:8a:d3:4c:ac:7b:5f:53:a6:74:bb:34:44:ee:
                    aa:80:e2:57:5b:67:d3:1d:06:b4:00:ab:2e:b7:c3:
                    7c:20:8e:29:75:36:a7:9c:85:31:0d:ea:bc:c6:c3:
                    af:23:2d:c9:f3:2a:ea:e5:3f:db:ff:3c:8e:7c:5f:
                    2a:11:fc:31:b2:37:41:8e:fa:9c:5c:a6:e2:d1:5b:
                    72:d6:25:1d:e0:7d:4b:07:ad:19:37:c5:48:24:c3:
                    4c:44:63:1f:20:a5:2b:8b:6e:33:09:b4:f9:e6:67:
                    a1:71:f2:e0:4a:e5:f5:3d:8f:70:c1:a7:2a:7a:de:
                    ab:79:f3:d1:59:fe:f1:32:20:0c:0e:9d:1f:ca:14:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:09:B5:85:51:3E:49:96:9D:FF:EB:AE:86:EE:10:CA:76:D3:26:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:9c:60:37:cc:2d:88:d1:7b:0f:63:0b:b8:12:25:8c:a4:
         9e:61:a5:b5:09:07:16:bb:81:fa:c6:3b:84:31:29:eb:f8:56:
         08:2f:13:9c:cd:57:af:b0:4a:cc:83:4f:0a:e3:27:b5:97:63:
         46:06:f4:6b:1b:ad:bb:98:ba:fc:7a:6d:32:52:20:3c:b8:8f:
         6e:24:56:71:51:05:42:82:f0:63:e1:28:56:02:8e:be:2e:d0:
         b9:4b:d4:87:4e:7b:63:81:7b:19:3e:d8:66:e1:53:4e:ad:ab:
         ca:59:d8:45:30:35:aa:ca:e6:ef:11:2e:39:fd:30:b0:13:5a:
         66:9f:27:fc:1d:36:02:a5:cc:16:d1:3b:8c:67:c5:f3:2a:07:
         d6:43:3f:12:4f:66:f0:aa:7d:4d:17:cb:d5:dc:78:f8:5e:81:
         a2:74:2b:ff:11:ff:f9:92:7f:7f:3a:d5:66:72:a2:d9:df:7d:
         da:a2:5c:ce:95:bf:b6:85:61:fc:35:51:8e:4f:1e:01:94:2a:
         28:33:f6:17:cc:b7:72:fa:ab:19:76:22:05:66:51:02:e7:c5:
         cd:fd:1f:9e:76:df:83:9d:80:13:94:4e:f6:53:8d:81:b7:b6:
         fd:ac:b7:84:8f:c8:0f:b7:16:7f:06:a1:9d:bc:e1:55:d3:65:
         82:54:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:58 2025 by rpki-client