Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
File:                     dc442485-e1e1-32df-b067-e09e5cdece8f.roa (raw, json)
Hash identifier:          XubTPPtVdCWmRAG+znOCs6qSqGe3+OuVUEolyaT/EIA=
Subject key identifier:   13:0A:56:B3:59:56:FF:2B:2D:9C:C8:C5:18:3D:12:AF:A9:88:B2:20
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584AA42B7947A8EEE11E17EFBB40
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     1299
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:79:47:a8:ee:e1:1e:17:ef:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=8d192a27-85f2-44b5-95eb-812285a9e068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:02:62:fd:1f:ca:b8:f6:f8:24:ae:fd:69:
                    a8:3d:11:34:e1:05:6a:ac:b6:b6:1c:a5:1f:e6:4b:
                    35:ee:2f:69:28:dc:51:99:d0:95:8f:25:a8:ad:92:
                    27:4a:d2:2f:9c:c1:e0:bc:2e:a9:69:ab:aa:7b:20:
                    42:05:5e:3a:5b:47:c7:ff:18:3b:26:14:2b:e0:45:
                    c0:e4:78:a5:47:3e:ab:6e:ac:f2:63:ed:a5:0b:59:
                    75:94:c4:da:57:76:ef:c0:31:27:5f:98:01:cc:40:
                    7f:f3:f9:c6:98:a2:af:2d:a1:8e:76:5b:12:33:26:
                    91:4b:ca:49:68:86:23:34:a4:a9:04:fa:6b:b4:46:
                    f7:de:52:4e:0c:66:2e:ae:37:d4:3e:f2:e6:96:ee:
                    9f:70:15:17:45:c5:78:83:82:e6:db:9e:66:71:da:
                    85:4c:98:ce:fa:e9:ec:ee:0e:f6:00:14:fe:d0:fb:
                    d6:3f:52:7b:81:a3:49:1b:5f:e8:f1:52:53:3c:b8:
                    a4:d0:83:07:f5:23:0d:60:d4:ed:0e:e4:7a:ed:b9:
                    e3:4e:b8:0d:4a:a1:32:71:09:1f:7b:57:f5:49:1e:
                    df:7c:90:2c:1a:38:49:c4:95:82:b7:52:01:56:a6:
                    c8:3a:87:93:4e:74:3c:f3:b3:9d:32:66:62:a8:76:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0A:56:B3:59:56:FF:2B:2D:9C:C8:C5:18:3D:12:AF:A9:88:B2:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:58:db:b4:38:6b:87:f1:8a:16:93:09:64:2b:f2:71:25:
         fa:5f:c2:b1:e2:06:d7:cf:4a:10:90:80:6d:89:81:2f:12:80:
         9c:fc:78:1e:62:a4:26:41:9d:03:a8:cb:2e:03:f9:61:0f:be:
         c4:37:be:9d:b9:26:5d:23:dc:b1:cc:d6:49:a0:9b:51:2e:04:
         ce:c4:2c:59:1a:0e:ed:4e:33:8c:f9:60:e1:45:42:3d:9f:86:
         81:5b:94:8b:72:cb:39:68:66:62:f0:fc:fd:e0:2e:b0:6a:06:
         3b:ec:d0:1d:0c:ca:cf:e0:18:5a:90:6b:e8:ee:fc:21:1a:cd:
         ce:9c:66:d9:e9:56:32:cc:7b:47:2a:e8:26:4e:e8:8e:f4:3c:
         2d:92:eb:25:0e:a3:9c:dc:ab:7b:f2:40:8f:64:0e:56:7e:ac:
         e1:42:a8:1b:ec:ea:05:f0:11:3e:a0:e2:3e:4c:9d:19:0e:fd:
         6e:58:ed:fe:37:29:4e:90:8f:45:99:09:b4:52:96:6d:e5:31:
         52:52:b4:cc:50:21:01:49:7e:40:50:cf:d4:64:12:82:36:fe:
         1d:72:7d:75:5b:21:a2:f3:86:98:92:b5:08:f7:ed:aa:4b:6b:
         c1:e1:d1:ad:b7:fb:d8:e3:17:66:2c:c8:9d:98:98:fa:2e:90:
         44:da:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:20 2025 by rpki-client