Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a/e80db42e-60e2-3143-b676-e0126361bdd9.roa
File:                     e80db42e-60e2-3143-b676-e0126361bdd9.roa (raw, json)
Hash identifier:          VpvzD4ykaAc5cMPxJfUrxu9kknqhzfLtUaqC/8/kLyo=
Subject key identifier:   2D:A1:FE:B6:D9:12:A9:1E:6F:1B:56:C9:38:A2:8A:31:F4:E2:85:48
Certificate issuer:       /CN=fa19277d-a043-4ce7-929d-6e2ad0f4925a
Certificate serial:       010D0C9F4328584B2FC189CA070BD858920C6280
Authority key identifier: E4:C9:F5:5F:24:23:AD:AF:30:3E:3E:42:97:D5:81:D7:C3:50:DD:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a/e80db42e-60e2-3143-b676-e0126361bdd9.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     398192
IP address blocks:        199.48.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a/fa19277d-a043-4ce7-929d-6e2ad0f4925a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a/fa19277d-a043-4ce7-929d-6e2ad0f4925a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:89:ca:07:0b:d8:58:92:0c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa19277d-a043-4ce7-929d-6e2ad0f4925a
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=ad867add-0c39-47be-b948-d456b002ecc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:40:27:07:bc:a6:ab:8d:36:0c:36:e0:2e:f2:
                    8b:4b:10:7c:ca:ee:67:22:ff:4c:52:eb:83:da:59:
                    9e:2c:1d:b3:cd:68:79:53:1e:de:43:36:8c:ef:28:
                    56:92:1c:48:ff:1a:a1:58:4d:dc:52:cb:cd:d6:38:
                    46:fa:7e:78:16:e3:bc:d3:17:57:c4:a7:35:4c:5c:
                    dc:9a:84:4f:6a:09:0b:55:2a:2e:c4:48:6a:8c:e2:
                    77:e2:9e:7a:8a:fa:ea:2f:dc:04:c4:ee:7a:d3:3e:
                    fd:6b:92:1d:5d:22:ea:00:a3:b5:ea:19:05:c1:ca:
                    d2:94:8a:f3:49:6c:03:ec:06:c3:a7:0c:18:64:51:
                    ff:57:a1:80:81:95:e9:ef:11:70:95:f8:44:6e:96:
                    5f:c2:fd:a5:42:e3:0e:21:7f:39:b6:3b:ca:b3:8a:
                    54:af:38:e1:fe:4c:d8:a9:4c:c9:cf:3f:42:52:33:
                    aa:9c:81:4b:92:c2:a9:fa:b9:b1:cb:c5:83:6d:ea:
                    25:7d:97:98:83:41:4b:94:b8:8b:6e:9e:cb:b7:06:
                    bb:7b:47:74:e5:07:35:8e:bb:7d:17:8a:46:32:ab:
                    9f:a3:d5:2b:87:d7:5b:09:14:ac:f8:53:3f:9f:84:
                    be:4c:6f:99:d1:c1:98:84:60:f8:3e:30:57:62:7c:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:FE:B6:D9:12:A9:1E:6F:1B:56:C9:38:A2:8A:31:F4:E2:85:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a/e80db42e-60e2-3143-b676-e0126361bdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a/fa19277d-a043-4ce7-929d-6e2ad0f4925a.crl

            X509v3 Authority Key Identifier:
                keyid:E4:C9:F5:5F:24:23:AD:AF:30:3E:3E:42:97:D5:81:D7:C3:50:DD:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa19277d-a043-4ce7-929d-6e2ad0f4925a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:ca:41:50:22:b2:32:f7:db:91:e1:bd:03:b3:51:6b:ae:
         a7:9c:6c:b2:9e:85:85:92:5a:f7:ef:09:35:fa:46:60:5f:ce:
         70:f8:c0:33:15:58:fd:94:13:f2:9a:22:52:ef:fa:19:ed:25:
         c3:8a:18:64:01:f3:ed:69:0e:9d:40:8f:e2:7c:c4:c7:65:97:
         8f:6c:67:be:8c:7c:83:5c:f9:f2:e6:6e:bc:32:29:75:12:30:
         3f:c7:95:e9:a1:f0:03:ee:f3:87:67:46:d3:11:62:bc:ad:f0:
         29:40:dd:6c:a2:7c:c4:4f:04:b9:9a:9e:d5:ef:b8:77:39:f7:
         02:8d:ee:7a:ad:0d:e8:14:d7:70:52:8c:10:4e:2d:aa:e4:e7:
         ed:ae:ae:be:9f:d3:77:46:47:16:f6:c2:68:2f:09:b4:38:c3:
         a3:59:b3:7a:ce:88:1c:77:51:f9:25:4c:11:0c:3a:9f:60:cb:
         d5:bf:b4:2e:05:ef:1b:54:65:28:8d:28:dd:d7:02:86:e9:f1:
         21:83:03:85:50:d7:83:79:5b:fc:a7:20:de:da:d6:d3:a2:c5:
         af:3b:fd:d0:47:35:58:2b:37:be:c7:82:cc:48:39:e6:94:67:
         2c:79:60:be:99:eb:3b:64:69:c3:c2:a8:20:70:dd:12:12:65:
         b5:f4:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:09:30 2025 by rpki-client