Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d493a96c-5614-370f-90f2-65885e80479e.roa
File:                     d493a96c-5614-370f-90f2-65885e80479e.roa (raw, json)
Hash identifier:          D6aKMPe2ghCADWnnXRuR15KJ/BNcJQdd3ORDqfkwwtg=
Subject key identifier:   E6:D4:6A:D7:B0:71:59:8A:F8:92:D3:B1:93:AD:DD:D6:EA:21:62:33
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584AA160DC9C147FE7C8189AD580
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d493a96c-5614-370f-90f2-65885e80479e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22418
IP address blocks:        192.157.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dc:9c:14:7f:e7:c8:18:9a:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a3365063-d718-4f09-b2fb-370fa4dbcc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:ce:81:7e:10:6b:16:ea:36:83:16:fc:ac:
                    23:ca:c3:36:0b:60:ee:75:3c:4d:a2:1a:1b:60:31:
                    56:e2:23:66:01:67:67:71:d1:08:1e:35:0e:ef:e8:
                    02:36:a1:e6:ac:1c:f9:11:fe:1f:18:76:05:39:2d:
                    cf:a3:bf:80:60:48:85:83:1c:82:fd:e1:26:f8:18:
                    d6:20:03:c4:ee:cb:e9:e9:fe:96:3b:76:a2:49:cd:
                    b1:11:f7:91:40:50:f1:c6:f3:34:b9:34:43:a7:05:
                    09:de:a4:ec:a7:47:0f:7d:98:0f:36:c5:76:38:1f:
                    e9:62:cd:dc:bd:c8:49:f9:bd:f8:61:0a:4a:b3:8d:
                    3b:f4:59:48:c7:e2:b9:e8:ae:b9:a3:61:dc:45:45:
                    b5:c5:26:79:1e:26:a5:28:e6:e7:60:db:07:60:12:
                    6d:e6:bc:0b:b3:16:01:f0:db:28:22:5e:98:4c:75:
                    f6:66:a7:a4:73:e7:3a:c6:03:1f:f8:5a:71:c6:72:
                    84:32:ea:a3:57:5f:1e:4a:61:79:fb:2d:78:cf:a1:
                    6c:65:f9:ea:9b:78:b6:73:01:fe:9d:ef:fe:25:bb:
                    8e:36:f1:41:66:8b:5b:6a:1f:cb:2a:b5:61:1d:db:
                    24:ed:cb:0b:1f:e8:89:74:c8:b7:0b:5e:05:6b:94:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D4:6A:D7:B0:71:59:8A:F8:92:D3:B1:93:AD:DD:D6:EA:21:62:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d493a96c-5614-370f-90f2-65885e80479e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:27:e8:9d:c8:48:8c:d3:e8:57:7d:3d:0d:e1:34:f8:88:a6:
         eb:18:8c:fe:c9:55:ae:fb:81:44:19:80:22:00:6d:fa:86:41:
         9d:e2:ea:26:3e:1f:e7:d3:26:fd:4f:2c:0a:81:82:23:dc:44:
         e9:14:a8:39:39:f8:f1:6e:38:ef:55:8f:41:12:e2:d0:04:af:
         08:dc:04:19:60:69:c9:3f:8b:55:11:20:0e:ca:fe:7a:9c:8f:
         c0:e0:88:e6:25:d9:ea:3d:55:3a:7b:fb:0a:c4:67:fd:3e:24:
         31:8e:dc:a6:80:e1:16:3f:c8:e6:ee:1c:62:81:a4:51:d4:25:
         04:c6:c4:c9:93:15:88:44:b0:2d:6d:6f:06:0b:e8:bb:06:71:
         54:17:ce:0b:26:86:46:66:3c:c2:32:7e:1c:8d:58:5a:4c:2f:
         47:3e:22:35:9e:14:c8:e3:4c:66:bf:fd:69:50:15:e6:1d:15:
         04:fd:61:95:a4:1c:8c:5c:57:30:9c:18:61:9a:01:6a:6b:d8:
         ec:fa:33:5c:3b:48:a3:92:de:d4:2b:33:28:0e:82:6d:f6:4a:
         3b:38:43:4b:a5:be:5f:15:4f:85:1c:0a:8d:42:5f:1d:d8:a9:
         1e:d6:15:1a:f5:fb:87:13:ac:08:d9:95:51:80:d5:3e:ff:02:
         12:e1:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:48 2025 by rpki-client