Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cac47292-6b0e-3312-879f-12aa496cc8e9.roa
File:                     cac47292-6b0e-3312-879f-12aa496cc8e9.roa (raw, json)
Hash identifier:          ET1HoAW3YMPLy348YC2Hj2dWM3LCrVzwt0NL+T6w458=
Subject key identifier:   5C:BC:56:5C:C7:1B:D8:1F:CA:E1:5C:1D:95:68:7C:D8:49:C7:5F:3A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC401B66CB2F09A3AB7C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cac47292-6b0e-3312-879f-12aa496cc8e9.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     63186
IP address blocks:        184.105.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c4:01:b6:6c:b2:f0:9a:3a:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=0e75a640-b052-40cf-a520-537a3d05cc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:24:12:e8:d2:57:44:8c:dd:97:79:ab:32:
                    9c:bb:db:6e:02:0b:b1:4d:4a:54:76:37:0e:39:0b:
                    a8:a5:9a:c4:26:cd:a9:7a:fd:da:88:cd:da:5f:dc:
                    76:86:c8:12:51:67:b2:61:ea:8b:cc:20:8a:b6:4c:
                    5d:53:92:e7:c2:4e:27:b3:23:22:14:21:d1:df:ac:
                    89:fd:c1:2d:6f:da:3f:85:b2:c2:9b:ec:a9:d1:2a:
                    2a:e5:57:14:e9:a7:78:9a:92:d6:c8:06:b4:d1:79:
                    aa:c5:6d:dd:d8:5c:58:5d:72:02:04:53:11:3a:f8:
                    c7:a1:9d:5b:5d:53:28:75:de:0d:f2:37:36:79:93:
                    bb:58:b4:26:03:44:87:89:89:3b:56:fe:c9:1d:cf:
                    4f:41:bf:29:ed:c6:a7:99:41:79:4e:53:a8:c4:b1:
                    25:75:d8:f9:60:6e:4e:d0:88:be:5a:48:08:3f:4d:
                    5a:f3:7c:5e:bf:63:e9:ba:90:2f:9f:b7:4b:1d:72:
                    ed:f2:04:df:2d:fd:ce:0b:1b:2d:3c:46:9b:10:a1:
                    91:29:96:31:52:fb:a8:31:c6:de:2f:f4:08:c1:b7:
                    a2:20:d9:54:8e:34:51:8b:35:a3:aa:d7:35:aa:3c:
                    68:32:0e:d3:b3:68:98:5c:a6:2b:3c:9e:af:5b:ef:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BC:56:5C:C7:1B:D8:1F:CA:E1:5C:1D:95:68:7C:D8:49:C7:5F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cac47292-6b0e-3312-879f-12aa496cc8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:2c:08:04:52:26:49:2f:89:20:83:e0:be:1c:60:2b:9a:
         73:b2:56:05:cf:f4:f5:ad:f3:9e:f4:50:6a:92:14:5f:9a:ba:
         57:5a:be:54:6b:5e:d7:e8:dc:91:cc:dd:36:06:91:3e:12:70:
         df:91:c3:76:f6:52:c1:8c:ef:42:78:7f:21:fd:3c:1b:87:ad:
         21:48:25:df:af:2b:c6:af:7c:6f:d5:32:e9:f2:64:61:20:f4:
         ca:45:25:a0:e1:2f:0c:19:f2:81:7b:5b:c6:6f:cc:0e:32:a7:
         82:bd:60:65:2f:3d:ec:de:44:f3:b4:a4:3e:1a:f2:70:a8:6c:
         cb:24:f2:3f:25:50:5a:83:28:79:2d:0b:8b:20:be:76:3a:fa:
         36:af:28:20:0f:b0:87:99:2a:6a:2a:e0:05:25:d8:e1:53:ac:
         7e:c7:f5:06:02:df:ab:81:e5:53:fa:88:c1:b6:a8:95:93:e0:
         49:de:68:c4:69:69:cd:a0:db:db:fe:50:e3:34:74:70:ee:03:
         96:cd:48:c7:1d:c4:be:fd:bf:03:2f:2c:df:92:30:74:db:1c:
         a9:69:4d:d3:8c:95:ca:40:41:e5:6c:68:28:e1:46:bc:07:31:
         75:ce:6c:3f:05:d0:70:46:63:7f:8b:47:4d:70:55:0d:0c:0b:
         2a:16:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:32 2025 by rpki-client