Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa
File:                     8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa (raw, json)
Hash identifier:          sKq/H3+vqHLwrfcVYUixbvIBX+vdiM/oVCAXvoRWa+k=
Subject key identifier:   11:3B:39:2B:13:89:E2:D3:33:26:4B:35:ED:5A:63:43:DA:EE:24:B0
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584AA160DC1DBF06BEB2EA2B7900
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22418
IP address blocks:        192.157.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dc:1d:bf:06:be:b2:ea:2b:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8d723e29-e97d-4f43-89b6-a89566a518e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c5:cd:8f:2d:72:e1:d5:36:3b:e7:2e:90:3a:
                    02:f4:3d:5f:ea:97:7f:96:2c:29:5f:26:62:62:23:
                    9f:c2:dc:56:eb:a8:ab:02:20:9e:80:43:47:0f:a6:
                    da:a3:0f:b5:fd:db:b3:e0:d3:a0:13:6d:67:bd:ff:
                    24:fc:c9:75:bb:a3:95:93:b9:a0:7b:5f:88:e4:4a:
                    43:27:99:40:1b:b8:04:e7:63:63:a3:91:41:a2:6d:
                    c8:2b:fc:ee:0a:cb:85:a0:10:7e:14:ea:85:61:8e:
                    b9:7e:91:b2:d9:d4:62:ad:6a:6b:50:42:d6:47:7e:
                    37:90:9a:13:f9:91:13:db:10:04:89:a9:a6:7a:ed:
                    c7:12:1b:66:6c:5a:59:73:31:41:74:69:16:d6:87:
                    e1:f5:e6:b8:ec:99:08:d5:08:2b:ab:fd:c2:1a:63:
                    fa:09:b1:25:c2:97:e1:be:e4:8b:04:a7:28:74:f7:
                    07:6d:83:73:46:5a:6b:09:42:17:f5:0f:44:03:7c:
                    ff:b7:9b:fe:2d:64:6c:27:87:89:37:f5:eb:25:f7:
                    05:73:2c:57:12:be:68:15:9b:3f:3f:dc:79:71:77:
                    92:79:96:e8:2a:82:97:f4:de:e4:30:ec:ca:d6:56:
                    9a:bf:09:ed:be:18:59:e9:c7:35:78:d9:73:e2:8d:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3B:39:2B:13:89:E2:D3:33:26:4B:35:ED:5A:63:43:DA:EE:24:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:87:87:a6:65:59:48:db:e5:75:e1:1e:b7:85:a4:1e:a0:
         96:b0:4b:37:37:b9:9d:96:4f:55:5d:bc:4d:84:d5:35:55:2c:
         bd:33:67:6b:36:ce:49:68:94:91:6b:75:4c:6a:eb:52:62:86:
         47:68:25:99:06:ce:a2:23:21:38:68:28:1b:7f:05:de:00:11:
         27:0a:d0:9e:7f:6f:45:27:04:20:4c:c1:96:7d:72:70:d7:85:
         3e:4e:38:b6:29:e9:78:29:41:83:23:21:ef:18:0b:13:c1:ba:
         73:82:0b:a1:72:fb:ff:c3:d7:c3:5f:f2:04:fb:73:26:d3:ed:
         62:1f:b1:8f:7b:a2:a9:95:10:44:d3:e7:37:10:d7:1a:92:bf:
         b8:78:30:5b:68:4b:a5:6a:3f:be:5b:be:39:5a:4d:b4:c0:2e:
         1e:1a:e3:ce:21:92:31:35:4c:c6:bb:ea:0e:5c:a1:96:73:66:
         01:07:e8:21:a7:72:25:01:84:b8:0d:d8:df:3b:96:f6:4a:ca:
         40:21:b4:66:e7:68:d2:a8:4a:01:92:36:fa:32:d0:be:59:55:
         75:dc:36:6c:3f:95:86:8c:b2:0e:32:d0:0d:e0:21:01:e4:63:
         6d:cc:f3:59:64:36:43:37:9e:17:09:ce:f4:7e:c3:a1:bc:fa:
         cf:80:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:11 2025 by rpki-client