Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa
File:                     8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa (raw, json)
Hash identifier:          zFS7IH0C7HMfrNy615DDrXHWh8+v2ul8p22kqPU1Hbw=
Subject key identifier:   C5:3F:DD:10:BE:C4:C0:92:A4:A3:83:8E:1C:FB:64:54:25:4A:DD:B1
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584AAB264B0AE53DF3154793FC1C
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     1207
IP address blocks:        192.231.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4b:0a:e5:3d:f3:15:47:93:fc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=2caec0a2-fff1-4939-86e7-937511a03b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:fa:f4:37:fa:20:83:b5:db:8a:23:a1:61:
                    46:2b:b8:0a:e4:14:e4:16:4d:57:68:7e:8f:25:2e:
                    42:34:f6:82:ce:ac:d2:21:66:97:b6:56:29:29:41:
                    d7:f8:4a:e5:b1:2f:64:43:4d:ab:4a:e5:df:09:e0:
                    50:01:c5:d0:80:71:8c:30:13:39:2d:ae:f4:70:e1:
                    53:29:94:2d:bc:fa:2c:82:dc:a4:a6:42:6a:4f:29:
                    ad:b9:37:15:a5:f0:ba:8f:f4:87:b0:fb:ed:d8:82:
                    82:fb:ca:cb:de:ca:18:2a:c9:55:37:77:03:dc:13:
                    6f:f4:74:42:f0:dc:59:cb:72:74:1f:2e:3e:ef:1f:
                    3f:8f:28:4e:d1:8a:a3:b2:4a:3d:e4:67:35:aa:39:
                    c1:48:59:62:11:f6:31:49:2b:d8:77:88:2e:62:72:
                    59:04:40:5b:5f:0a:d2:71:f4:c4:6b:ff:a5:31:88:
                    08:23:44:7b:be:4d:07:9c:e4:c5:99:e7:41:c3:16:
                    a5:05:ed:ed:24:63:b6:76:0d:c7:37:d5:ac:4f:1c:
                    75:67:e3:d0:7c:2a:9d:89:48:fe:1d:0c:bf:50:2c:
                    75:32:6c:0b:fb:d5:32:b5:15:7e:b5:74:df:cd:bb:
                    7e:43:a2:6d:ea:3b:12:b2:b9:77:d0:a8:f8:e2:cb:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:DD:10:BE:C4:C0:92:A4:A3:83:8E:1C:FB:64:54:25:4A:DD:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:1d:cb:c4:d4:24:e2:0f:56:fc:ab:f1:76:5b:37:1b:32:
         37:69:84:86:6f:22:0d:f8:27:42:bd:c3:68:8d:b2:5b:83:a6:
         af:35:8b:38:98:2c:62:9e:02:4e:ab:af:e3:a8:c4:33:31:72:
         64:16:db:60:b6:12:8b:b3:6c:d0:93:5d:a1:66:53:1d:98:15:
         f5:54:85:b0:db:5a:fe:a8:06:b1:11:d2:5b:44:51:7a:bd:a5:
         4f:5b:bb:40:07:74:2c:8b:2f:fc:79:8f:f4:3d:de:46:c3:51:
         fb:08:5f:96:35:45:61:94:86:2b:a6:d6:76:fe:5e:dc:8f:0f:
         3b:f4:13:41:58:49:02:96:15:40:34:e5:0b:71:8a:7d:29:4b:
         74:31:e1:61:1f:af:3c:73:3a:0f:cf:d8:6c:ec:a4:52:3f:8a:
         87:a4:75:91:d0:59:2b:28:6e:8e:44:62:3c:80:a8:fb:39:1c:
         bc:2d:a2:47:b9:98:07:9d:6f:3d:6a:74:66:4f:32:a0:eb:b7:
         1a:49:a5:fc:23:16:86:25:c2:26:08:f3:3d:94:2b:90:f1:7d:
         95:02:b2:1b:a3:ca:ba:7c:52:e5:77:ed:20:ce:56:f1:85:63:
         22:1a:9d:03:b1:df:18:25:36:6a:5a:1d:59:f1:ea:73:d4:c4:
         8f:23:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:17 2025 by rpki-client