Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa
File:                     1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa (raw, json)
Hash identifier:          fnxD/Ord/LTKvgQg3ObBdxvfN15Kyc64LCc/UdGTcuY=
Subject key identifier:   D9:08:11:26:1C:30:94:BD:D6:81:C9:17:D4:65:86:1D:77:47:62:0E
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584A920634124EC6530E499B7BC0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     399291
IP address blocks:        200.5.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:34:12:4e:c6:53:0e:49:9b:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=5f514646-ba64-4fb9-97b9-897ce444e825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:3e:81:3b:47:e5:bd:da:11:a2:d4:7c:87:
                    d7:80:bb:9f:da:1d:16:88:d8:21:a7:94:85:2e:f5:
                    8d:ca:6c:98:02:f4:97:66:7b:48:54:c2:fc:64:4c:
                    25:9b:ca:d2:40:9b:c2:12:88:ee:f7:68:3b:c3:1e:
                    36:f3:3a:97:0a:c1:59:3b:18:83:9d:d2:77:d3:45:
                    87:0f:c4:72:75:db:c0:9f:c2:dd:e5:02:37:aa:e7:
                    18:2a:40:94:41:0d:ad:dd:9a:99:e8:8f:f9:1c:99:
                    7b:5c:91:15:0d:5f:97:c1:c9:30:b7:10:ff:c8:58:
                    7a:b7:c0:41:a4:e4:de:9b:2f:d1:2a:60:74:a2:45:
                    53:56:13:9c:3c:ce:5f:f8:70:de:9d:f2:3c:24:2b:
                    6a:25:bd:a4:8a:66:06:fc:53:41:4e:f5:d9:45:55:
                    85:4d:b5:f4:37:a2:fc:a7:33:75:34:99:e7:c2:fd:
                    8f:af:f6:bf:be:34:9e:a7:dd:ba:00:f0:e8:fb:6d:
                    84:78:7a:07:0a:9c:e8:de:bc:31:ca:51:76:54:f5:
                    9d:38:8b:75:df:ea:d5:1c:9c:36:65:cb:2f:af:48:
                    5d:c3:ad:07:f0:63:1b:ab:bb:db:2a:83:09:96:a3:
                    ad:50:83:8e:5a:5f:96:1a:bd:8d:11:93:a1:dc:49:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:08:11:26:1C:30:94:BD:D6:81:C9:17:D4:65:86:1D:77:47:62:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:b3:95:a7:83:11:b8:28:34:90:71:3f:8c:1d:0e:0c:fa:
         ea:de:ba:cb:63:5c:85:58:02:ca:41:05:b5:ab:5d:0c:13:07:
         12:e2:27:8f:af:a1:5b:c8:d4:0c:4d:e2:01:82:79:e7:17:03:
         e0:e4:46:d9:22:5f:34:f8:6a:3b:28:15:bc:85:62:4d:75:3c:
         ed:83:75:5a:9b:4f:86:16:21:71:a5:1f:f2:18:56:83:f6:64:
         53:17:fc:48:c3:7d:28:79:fe:b9:ed:66:85:26:7e:60:3b:7e:
         95:40:e9:8a:1d:9e:e5:8b:72:ef:66:2d:45:0d:98:b7:9e:13:
         24:26:c5:87:0c:9e:e8:c8:da:ba:ec:39:7e:0c:f6:7b:1e:6c:
         00:25:ed:1f:22:b8:4b:76:99:80:43:f5:f4:cd:14:e6:ed:bc:
         18:74:1a:45:ea:f0:d7:70:02:7a:80:1a:9b:e3:d8:38:1e:56:
         2e:9b:79:03:81:67:5f:8c:f3:48:8b:9c:70:60:f7:b2:68:0b:
         da:20:34:3d:05:4c:b2:c2:c0:9d:37:09:c4:96:e4:9c:4e:b4:
         61:c8:78:4f:4a:da:d3:7b:61:55:fd:1a:bb:87:ae:01:87:de:
         6e:17:60:58:b4:38:ab:92:0f:17:07:c4:8b:f9:7b:c8:c5:5a:
         92:2d:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:16 2025 by rpki-client