Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
File:                     52215577-a591-3e62-b438-ff08b1bba9ec.roa (raw, json)
Hash identifier:          9EQcJ9KBI/lp4Rw3iIw4CToElR0noeCzmzBhULnyJwI=
Subject key identifier:   54:AF:59:63:ED:29:42:B0:B6:95:DE:91:10:D7:A8:20:CC:76:44:6F
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584AADF10EB54BDE2004837D2A58
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     7782
IP address blocks:        209.193.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0e:b5:4b:de:20:04:83:7d:2a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=28f3685b-62be-464b-9a33-865976b8c64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:da:9a:8c:87:fb:4e:28:b0:27:28:83:f4:
                    e7:1a:80:07:f2:ad:ad:fd:a6:5b:97:d3:94:b6:af:
                    c5:e1:3f:ad:e4:d9:1e:ab:83:aa:be:c3:4e:cf:a8:
                    e3:f0:75:49:d7:56:0f:9a:da:a6:ff:eb:41:14:f6:
                    65:7b:db:b6:e3:81:60:99:8a:84:b7:42:df:49:57:
                    a6:53:9f:d6:89:2b:8a:49:80:6c:84:2b:9f:13:f3:
                    aa:c6:fb:d6:7e:fe:e2:1a:94:2a:e4:a6:52:11:4e:
                    d9:04:6f:6a:91:07:5f:aa:fd:3b:54:25:43:e9:0e:
                    a5:e9:a7:d4:29:7e:e7:43:ed:0f:f4:6b:8d:a0:71:
                    e1:77:28:32:53:60:d2:d8:5f:27:e7:4e:ad:ce:cb:
                    d9:35:d0:86:f8:8e:aa:28:28:fb:52:58:99:d9:09:
                    0c:55:d0:81:39:23:d2:c4:f2:17:79:15:bf:6a:c4:
                    0a:e4:a0:5e:81:01:f4:33:16:dd:f8:bd:69:03:cd:
                    6c:75:bc:d0:b5:b2:db:6a:3f:01:c3:29:08:2f:56:
                    57:c5:26:b5:3e:b4:14:08:e6:f7:49:cf:af:87:ad:
                    87:99:f6:38:4e:f5:4f:fe:17:84:57:18:85:99:9e:
                    eb:67:a6:f5:0a:b4:03:37:e5:2e:f4:48:17:bf:76:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:59:63:ED:29:42:B0:B6:95:DE:91:10:D7:A8:20:CC:76:44:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:81:ee:0e:c7:9e:ce:2c:87:36:4a:b2:cd:4c:d1:46:84:
         fc:5a:13:cd:68:98:6b:46:b6:b2:c6:5e:c2:79:d9:e7:19:f1:
         2a:27:f4:66:aa:30:fa:e1:c4:46:6a:e3:88:96:21:49:c6:cc:
         14:b7:bc:ac:f7:80:37:c5:ff:21:13:8e:9b:6e:5b:bd:1f:73:
         0e:8f:49:31:a1:df:06:29:90:be:f9:d5:51:12:c6:b2:a8:b3:
         75:16:1f:84:7d:8c:a0:0e:96:72:73:00:e6:bb:72:d9:92:e5:
         20:26:48:5f:90:55:7e:00:81:6b:57:40:9a:c5:7a:59:90:a9:
         e7:c3:e6:b6:b3:99:3c:8e:d6:97:cc:4e:c4:86:77:25:68:6d:
         62:6f:88:0f:ed:e4:be:52:99:18:60:07:b8:6f:7f:27:51:7a:
         29:d7:1c:aa:d8:d2:1f:f4:2a:81:25:a0:bb:e9:cb:b5:46:15:
         04:e4:48:5b:1f:e7:1e:22:f6:c7:43:be:1d:2b:c0:5f:07:c0:
         01:7d:21:ff:f2:d5:f9:3f:19:f4:69:d2:92:18:a6:27:16:2f:
         f4:6a:53:8b:24:48:81:75:25:c4:44:01:45:b5:77:b2:78:10:
         16:42:63:e6:b3:72:52:d8:93:2f:ea:5a:0b:6b:d2:f9:08:50:
         50:ef:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:11 2025 by rpki-client