Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa
File:                     56878942-8a9e-3f0c-80e5-1b964e624fc7.roa (raw, json)
Hash identifier:          1sZPLTwMGf4VHWUULFeB5D+VuSoL7JzcIOTpH1DgLRU=
Subject key identifier:   A2:67:59:FB:96:4F:F5:C8:EE:24:2D:B8:48:02:DF:A5:AA:86:04:E3
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584AB650F9B6878D801228D271C0
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        89.192.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f9:b6:87:8d:80:12:28:d2:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=80b6eb4a-7c8f-4b8b-a8da-08c30baa8ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:b9:de:f7:9d:69:94:c8:1c:21:7d:14:25:
                    33:e1:c9:44:b9:c1:1f:0d:0d:6a:61:36:58:fe:8f:
                    e7:77:e0:0a:5d:d9:98:ba:44:9f:46:ed:15:60:85:
                    1a:4f:ee:2b:e8:91:50:1e:18:73:ee:07:a8:2c:e5:
                    79:2e:6a:95:b2:62:7f:4e:91:27:58:ab:2f:1f:1e:
                    1f:c6:3f:1c:4b:8b:f4:f2:68:e0:09:cd:46:13:34:
                    ac:e2:00:a0:1f:72:e7:3e:f5:a8:0a:b7:f0:ca:b7:
                    6d:cc:6c:e4:25:43:38:65:ad:13:1f:20:e3:50:13:
                    8d:66:1a:cb:d0:d1:e1:f2:a9:0e:fd:54:dd:26:7c:
                    91:1c:10:66:f3:91:6f:30:d7:47:6c:35:6c:21:90:
                    20:6e:0c:10:eb:43:a0:3e:a0:e5:38:17:cc:da:1b:
                    0c:4d:c1:4b:a7:90:2f:4c:b0:d6:bb:4b:57:91:ea:
                    b1:4b:28:52:b7:15:21:c3:6f:dd:d7:e6:fe:67:19:
                    27:b0:67:e8:22:68:ec:8a:7e:7d:bd:7b:f8:56:60:
                    1f:29:2e:af:77:f5:35:95:67:e7:8d:ec:5f:6f:b4:
                    66:03:9e:33:5b:08:ce:22:69:3f:16:57:48:2d:65:
                    3b:c9:bc:4b:46:95:bc:77:64:17:7e:d4:d5:97:4b:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:67:59:FB:96:4F:F5:C8:EE:24:2D:B8:48:02:DF:A5:AA:86:04:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.192.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:64:e1:fe:c2:51:99:67:62:ee:8a:1f:1a:95:ee:b6:b9:53:
         7f:fb:31:40:81:71:73:d0:40:e5:e0:40:46:33:ae:50:39:60:
         4c:61:08:fb:b6:74:d3:e5:1f:bc:be:52:f0:2d:18:86:e1:8b:
         9b:fb:13:c0:a4:b4:e2:0d:8b:cb:65:30:a7:eb:67:39:e5:d1:
         23:72:5c:46:1d:64:a4:77:1a:c3:e6:cc:0b:b6:e4:f3:8a:dd:
         e1:72:a3:a0:4b:a3:19:91:b9:b4:dc:37:ba:83:fb:8e:9d:8b:
         76:46:ee:9d:2c:f8:71:98:25:38:88:a3:0e:df:75:4f:ea:02:
         4f:19:83:4f:61:69:e9:52:de:ee:fe:47:69:4a:39:c4:2f:cb:
         45:75:ef:bb:98:bf:80:5d:17:dc:6f:c4:6b:c1:a2:fc:7e:0a:
         dd:11:c7:1c:a4:86:cc:da:6d:c8:04:db:4c:bb:5a:dc:bd:30:
         e4:c5:04:e8:82:77:c8:b3:bf:7d:5c:8c:eb:5e:f8:8d:36:2f:
         96:0d:15:10:76:bf:02:e8:03:d0:0d:64:69:26:31:19:a9:e3:
         41:f9:85:e2:53:b6:a2:c2:90:ce:b8:e7:2e:90:a4:f3:f8:30:
         80:24:6b:0d:23:3a:7c:f8:5c:d1:a3:a3:61:92:63:a4:f7:1a:
         c8:4b:f3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:40 2025 by rpki-client