Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/c7f8f723-534e-3e96-9604-222ed2298091.roa
File:                     c7f8f723-534e-3e96-9604-222ed2298091.roa (raw, json)
Hash identifier:          5RDr4sso8kj2f/lo+UUWR7c5AxJIbz6iAnpECIl+nHA=
Subject key identifier:   53:88:BB:1E:F1:B6:EC:E3:8F:05:96:A5:9C:D9:FC:12:A2:F1:ED:72
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584AAB2651FFB3929F61F00BB820
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/c7f8f723-534e-3e96-9604-222ed2298091.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     36678
IP address blocks:        104.192.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:51:ff:b3:92:9f:61:f0:0b:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=9dcd82c8-8785-4b14-b05d-58e98d33a249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:90:9d:56:86:e5:f4:4e:62:1c:3e:02:e4:
                    0b:8f:e0:af:47:a7:a0:93:4d:b6:52:3d:90:81:b7:
                    0d:67:61:76:9c:82:99:5a:d4:3f:dc:75:c6:98:87:
                    2f:b1:ca:a9:2c:28:07:4c:e9:60:4c:e8:3e:6a:47:
                    90:98:03:73:23:75:23:14:2f:c0:9c:4b:2c:3e:80:
                    8d:8b:fc:9f:3e:4b:14:93:4e:57:5a:f2:2e:37:a3:
                    9c:c3:94:08:02:a4:cf:99:df:7f:98:d7:f1:5b:80:
                    fc:63:d2:d1:72:8d:29:ab:d8:59:fe:de:e8:51:76:
                    1e:c6:5a:5f:1b:ac:dd:39:67:be:10:a0:1f:cd:c2:
                    68:14:47:4d:69:59:7a:5d:55:b9:8f:eb:fa:be:58:
                    30:c3:81:7c:95:94:d5:c2:62:a2:74:ef:21:41:62:
                    f1:5b:b1:28:29:65:7c:9c:41:2d:d3:47:90:42:8c:
                    fc:36:39:1c:95:b8:37:32:90:20:d4:77:b7:82:55:
                    10:6c:98:b8:a1:46:d8:ce:aa:8a:e6:8b:39:9a:7b:
                    dd:4f:82:ac:bd:6c:7d:32:6d:45:df:f2:3b:19:a0:
                    90:6b:de:4c:95:20:82:8f:b3:4f:bd:1e:d3:c1:76:
                    c2:6e:b2:4e:76:9e:b6:00:cf:76:a0:b2:45:80:1e:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:BB:1E:F1:B6:EC:E3:8F:05:96:A5:9C:D9:FC:12:A2:F1:ED:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/c7f8f723-534e-3e96-9604-222ed2298091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:92:6e:15:bc:f5:d1:e6:f4:a5:6e:ef:94:d7:7d:ac:50:
         f0:7c:10:d7:77:45:02:8a:8f:dd:1f:2a:4b:e7:a2:1c:de:19:
         2e:27:74:f8:d8:9b:95:92:a2:11:12:96:99:96:d8:e8:11:7a:
         9f:f2:e6:bf:a2:3b:c2:a0:3c:ef:fe:d5:53:2f:5c:aa:a4:74:
         a6:17:f9:b3:54:4e:0f:a4:7e:6e:72:86:1d:55:6d:00:a8:93:
         3d:b0:a2:3c:f1:c2:08:50:06:5e:f4:ea:85:b6:5b:5c:87:4b:
         7b:ff:8d:55:8b:53:e6:48:d3:da:7e:c0:36:b0:01:94:c1:a8:
         e3:2c:f8:60:4d:9c:c2:df:f4:c6:b6:c5:6a:47:0c:a8:41:7c:
         33:05:85:c7:cd:0d:fe:09:64:32:e7:51:f9:b6:f6:f1:91:04:
         54:f4:d0:4e:24:fb:f0:65:f8:8b:fc:57:8a:17:54:ae:78:92:
         40:0d:57:d6:f7:b7:de:2f:37:8e:ac:42:88:4a:a2:dc:77:b6:
         fe:22:9d:c7:f0:24:c8:53:68:8f:34:e3:11:50:f9:55:06:54:
         d6:e2:c5:51:a6:ae:16:eb:31:b4:aa:bd:03:95:b6:66:e7:e8:
         4c:68:ee:17:0a:1b:d6:71:12:57:88:f6:6a:dd:66:64:9c:ba:
         aa:66:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:43 2025 by rpki-client