Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa
File:                     8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa (raw, json)
Hash identifier:          AeCnFhXs8hKWat6ZBuIN1fPa7LD97EIciqtQrxNorQY=
Subject key identifier:   74:B0:0E:A7:40:7E:77:0B:1E:BC:E3:6D:6F:6B:8A:99:E3:2A:DA:93
Certificate issuer:       /CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76
Certificate serial:       010D0C9F4328584A8575E694F6DEE3A12515DA00
Authority key identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     394026
IP address blocks:        199.20.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:e6:94:f6:de:e3:a1:25:15:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=fe8e829b-8440-4221-9da1-d7626921ea1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:ac:3e:f4:cd:ca:1a:73:37:0f:ca:5e:36:
                    45:a2:1b:e1:c3:e8:9d:9b:ab:49:ba:c6:f3:e7:8c:
                    f5:ea:33:f5:39:f8:ec:10:f8:b0:c8:d6:c5:26:08:
                    60:be:15:32:f0:c2:12:dd:f9:2c:de:ed:ed:90:3d:
                    e8:ae:a3:3a:d7:37:2d:40:56:58:54:09:25:0e:06:
                    b2:ae:f1:c7:85:c7:ec:e3:18:1f:28:3b:cb:05:42:
                    66:74:a2:b1:65:29:68:56:6a:e5:39:d0:9b:13:2c:
                    0d:74:62:83:b6:24:e7:9d:a7:50:0f:76:0a:1e:c0:
                    b9:d5:5d:12:02:79:c0:f7:52:fc:22:cd:e3:de:33:
                    d7:fe:13:f4:8d:87:f1:4b:b4:a1:10:cb:7b:df:f6:
                    16:6c:6e:50:1f:ed:db:03:1d:de:ad:41:44:37:6c:
                    89:46:bb:e7:17:92:84:00:69:ed:18:9e:5f:c0:a0:
                    14:61:28:fb:7e:bc:77:fc:9a:c1:f3:26:50:48:ad:
                    e3:2c:c7:7f:72:82:75:f3:5e:dc:d5:71:7f:78:2d:
                    9c:2b:40:78:dc:28:b9:49:36:d4:60:b9:00:93:11:
                    3b:50:13:ce:44:4f:17:ee:67:fb:df:0a:ca:56:71:
                    d3:6d:52:73:e1:4d:36:d3:b6:a9:b7:b7:4b:e2:41:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B0:0E:A7:40:7E:77:0B:1E:BC:E3:6D:6F:6B:8A:99:E3:2A:DA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl

            X509v3 Authority Key Identifier:
                keyid:8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.20.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:4c:6e:dd:fd:25:a6:df:2f:61:42:d1:d8:55:54:6a:0c:
         d2:af:0a:5b:96:0a:3b:8f:4a:1d:41:66:47:8c:5b:43:a0:38:
         4b:c7:36:cd:f1:b4:78:4d:06:11:10:37:42:25:94:75:36:c1:
         0a:d2:b7:c3:1f:71:99:cb:e1:fd:9d:c8:45:27:db:d8:a1:7c:
         59:ca:e1:1e:8d:c3:2e:9c:97:bf:95:ef:ee:4a:b2:e6:4a:0f:
         7a:32:36:f9:f9:ac:c0:13:9c:7a:99:2e:de:90:38:19:ab:df:
         b1:7b:91:68:d7:d7:36:76:21:38:de:4a:27:82:de:05:61:fc:
         16:88:de:26:e0:ce:5c:7c:71:4a:86:7a:1d:a9:9a:4f:32:ad:
         5c:e3:94:f0:0a:93:e6:f6:d2:ae:30:ca:2e:d9:29:c7:13:10:
         76:2f:03:49:44:2b:db:42:3f:e5:7a:3c:b9:a9:f8:c8:ea:e4:
         51:d2:b1:2f:7a:87:30:64:29:98:6b:d7:61:6d:1e:ed:14:c9:
         97:c3:be:7c:a1:76:24:f4:6c:92:41:28:fc:f3:3e:37:98:13:
         fc:e8:b1:d1:b2:a4:4c:12:fb:6e:6f:12:9e:a4:5d:46:4f:37:
         65:28:9c:27:05:b8:ee:8c:af:62:dd:9a:37:d3:24:0c:90:62:
         74:c8:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:27 2025 by rpki-client