Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/61ff4cd4-77cc-3ebd-9b83-8959c1554726.roa
File:                     61ff4cd4-77cc-3ebd-9b83-8959c1554726.roa (raw, json)
Hash identifier:          ZCG/9xKIL/HnYSd8hOwR6tWOKBj5NUT0LL4ae/1t+OA=
Subject key identifier:   03:B7:8D:36:FD:71:04:CB:0F:A7:98:84:60:9B:08:05:4F:C8:B3:55
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1621002BE077DB176550800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/61ff4cd4-77cc-3ebd-9b83-8959c1554726.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        192.61.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:10:02:be:07:7d:b1:76:55:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e46e27ac-5931-4b4c-9443-872732350c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:bf:ce:01:a1:ef:15:83:0b:d3:99:ac:48:
                    06:54:c7:76:a3:ac:f2:a7:c5:4b:88:72:14:5c:80:
                    bd:ba:b9:c4:15:4c:da:1b:9b:52:1f:ec:44:e5:08:
                    11:b9:a4:56:a8:95:8c:ae:8a:b1:c5:3c:fd:ed:49:
                    10:79:68:04:d9:56:34:58:e7:1b:12:00:51:dc:fa:
                    e7:b4:4e:a7:df:52:b1:aa:14:56:7e:b0:ed:a3:74:
                    e2:ce:b2:28:f7:7b:4b:96:ec:7f:cc:9d:ce:f9:24:
                    ec:4b:d2:fb:a3:b2:95:7a:f9:08:27:c4:d2:45:40:
                    8d:17:c5:78:7d:70:2c:61:d0:49:6f:ff:2a:6d:4c:
                    62:86:8a:a1:24:e7:ee:1f:f9:74:0b:60:3d:ff:5b:
                    8a:81:78:53:89:16:66:ac:37:a4:18:e7:2a:39:9e:
                    38:62:af:5f:b1:52:a4:db:6a:a0:dc:bb:3e:fe:d8:
                    16:63:65:44:34:26:e0:75:3c:a9:67:4b:23:92:1a:
                    7f:e5:66:47:01:3e:10:f3:e9:ae:aa:bd:57:b4:57:
                    c4:23:56:e4:6f:3a:ca:d8:f7:ce:3b:5b:99:80:8f:
                    33:c6:3f:69:94:48:dd:71:63:0e:50:9b:9c:1d:70:
                    47:30:59:ca:19:c6:07:62:9a:21:d4:78:87:bb:a1:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:8D:36:FD:71:04:CB:0F:A7:98:84:60:9B:08:05:4F:C8:B3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/61ff4cd4-77cc-3ebd-9b83-8959c1554726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:60:8b:02:c6:e7:29:5c:48:25:ed:ee:15:2b:5e:5e:79:b2:
         92:5d:54:34:78:34:89:06:1b:50:08:c8:a2:03:5f:df:e3:b1:
         d1:34:9d:3f:85:31:ea:4b:e4:dd:b2:cc:46:f1:17:c0:ef:86:
         24:d2:7b:95:26:67:6a:e0:96:e9:c1:49:af:f1:38:dc:f6:bf:
         a0:4e:27:ae:5d:ab:38:37:ae:0b:9c:96:9c:b8:ac:3b:ef:c9:
         cf:f0:6a:2c:fd:ca:c9:db:bd:e1:9a:53:fc:9c:50:0e:d9:1c:
         42:a5:1b:a3:d9:93:e1:7c:4c:56:10:0e:76:64:b1:6b:06:e4:
         b9:24:d3:b1:b2:24:7d:b1:d4:63:6e:7a:a6:0c:a6:77:57:33:
         d9:6b:c3:8e:64:0c:50:92:21:60:e1:67:a6:b9:6d:47:fb:c1:
         cb:1a:44:f3:36:89:69:f0:e7:70:ea:80:53:4d:00:ea:2f:29:
         0b:74:68:e1:cc:2f:07:e0:63:6d:84:be:a4:73:e0:fe:d4:3f:
         fc:8c:af:e5:d2:4c:c0:c5:62:ee:79:2a:a7:10:6e:fa:1c:ac:
         a0:c5:66:19:c1:d9:b4:d4:c5:3d:03:8d:31:a6:54:e1:8c:8b:
         37:e4:71:40:94:8b:17:16:82:1d:66:d1:b4:5a:0f:e2:84:32:
         47:5e:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:46 2025 by rpki-client