Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/a1284005-bf94-3589-b2ba-2f85ac99b52b.roa
File:                     a1284005-bf94-3589-b2ba-2f85ac99b52b.roa (raw, json)
Hash identifier:          h7pQdvL8JLHowWQLMYQeIXYMYXD0+VdJ59s/QrkM6oE=
Subject key identifier:   3B:C4:0F:49:CB:B2:6E:B9:5E:C0:FD:19:5F:40:41:79:E6:37:CD:7A
Certificate issuer:       /CN=377b79d2-ad9f-4e93-8ddc-ced5b027b20a
Certificate serial:       010D0C9F4328584A5FC5DA06337B83DE4CE40B80
Authority key identifier: 68:DE:A0:EB:8E:B3:A8:71:2E:19:49:94:A8:BA:00:88:37:2F:2D:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/a1284005-bf94-3589-b2ba-2f85ac99b52b.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.97.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:da:06:33:7b:83:de:4c:e4:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377b79d2-ad9f-4e93-8ddc-ced5b027b20a
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=c1ef99c2-e20a-4851-b938-333353087ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:54:6d:4b:ca:93:89:34:74:05:9f:72:01:
                    e2:75:93:98:fe:36:a2:9a:2b:a4:97:33:21:91:1d:
                    64:1f:e5:7c:56:08:05:4b:d8:61:1b:e5:fc:b8:10:
                    65:b6:91:89:4b:98:12:44:9d:35:01:6c:cf:ff:a9:
                    88:2a:39:92:21:ac:ab:dc:37:7b:99:c8:42:25:c6:
                    98:5e:9c:3d:a6:87:ea:04:63:96:a3:d9:17:30:a5:
                    c8:6a:22:0c:fc:52:00:37:f8:62:63:c8:d5:ae:1c:
                    3b:83:0a:d7:d4:e5:e8:05:ad:f0:41:ab:3b:a9:99:
                    5c:fd:03:75:5f:f2:27:eb:fa:a7:77:51:e0:72:ba:
                    e0:72:b7:fc:73:51:76:e8:01:c4:44:de:4b:d5:8a:
                    4e:94:f0:ef:a9:1c:89:68:d7:26:95:9b:c3:e0:25:
                    ee:4e:74:b3:93:7e:18:1a:5f:16:ce:cc:fc:59:4b:
                    96:b1:f9:97:8d:2c:9f:f7:18:76:09:71:bf:d3:f2:
                    fb:79:13:6e:36:16:0b:86:06:6f:c1:c0:aa:f7:14:
                    63:ed:5d:ba:49:f2:9d:52:71:a1:a2:81:cf:00:67:
                    f9:92:f0:ec:6a:73:9d:d3:05:dc:07:b4:04:3d:b2:
                    a7:18:e6:fa:77:d2:a6:4a:31:1f:1d:4e:e0:99:f8:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:0F:49:CB:B2:6E:B9:5E:C0:FD:19:5F:40:41:79:E6:37:CD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/a1284005-bf94-3589-b2ba-2f85ac99b52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.crl

            X509v3 Authority Key Identifier:
                keyid:68:DE:A0:EB:8E:B3:A8:71:2E:19:49:94:A8:BA:00:88:37:2F:2D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:eb:1a:6e:36:92:dd:69:0d:4f:72:9b:4d:b1:7c:96:31:
         6d:87:70:af:a2:1b:ae:b1:2d:02:68:13:df:0f:a9:5b:67:aa:
         8b:fe:bd:f2:12:90:f2:d9:29:41:61:79:b3:cb:05:5a:23:1d:
         f9:1f:ad:4c:b7:be:d4:36:02:59:21:55:fd:28:e7:dc:5d:3f:
         fe:d2:35:e3:1e:35:4b:db:ae:a1:90:e3:33:5e:cf:57:72:3b:
         90:e1:34:c0:20:03:f7:61:36:89:ee:ba:ee:ee:21:8c:76:4e:
         ce:0f:91:3c:6d:50:96:b8:b6:af:ad:22:2e:23:73:00:cf:62:
         fd:c5:56:ab:da:9a:2d:e8:92:01:d2:2b:b5:f7:91:ab:26:f9:
         f6:3c:0b:ef:e4:11:20:3e:c5:9a:a0:cd:fc:27:fa:e0:f8:64:
         77:79:ea:40:70:67:b5:4c:05:b6:f3:f4:47:ff:a4:d2:38:c8:
         7f:5c:db:3f:fc:a6:1f:f9:7c:b2:f0:19:2a:e2:d3:65:88:c5:
         51:7b:9b:cd:da:2c:b7:b1:f5:54:8e:05:23:54:9c:8d:a1:2c:
         21:ee:fc:98:7c:24:0c:76:d2:fc:02:ed:aa:84:25:6e:51:e1:
         70:36:4c:5c:4c:d3:47:3d:0e:74:3b:c7:36:1e:59:1d:56:18:
         4f:7c:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:06 2025 by rpki-client