Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa
File:                     9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa (raw, json)
Hash identifier:          tzlxOtPx+6ejeZC+8bPM6Oc4lhEdYawZwkhBIExWF9w=
Subject key identifier:   4E:6E:EE:25:2B:06:14:A3:AC:2A:EF:FB:73:91:30:41:F1:B9:35:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08E6743EA89AFD05BDBE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa
Signing time:             Thu 24 Jul 2025 12:38:59 +0000
ROA not before:           Thu 24 Jul 2025 12:38:59 +0000
ROA not after:            Wed 22 Oct 2025 12:38:59 +0000
asID:                     396727
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:8e:67:43:ea:89:af:d0:5b:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:59 2025 GMT
            Not After : Oct 22 12:38:59 2025 GMT
        Subject: CN=fb8d9608-0b36-4995-a15a-fc1a536163ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:15:48:96:c3:6f:c3:9e:00:d7:a7:22:de:
                    19:f0:a4:d4:c0:84:73:e8:19:14:15:6c:17:87:8c:
                    eb:77:a8:d3:d6:10:32:7e:fe:03:1d:a8:cb:26:de:
                    a6:20:46:f9:c4:34:4d:cd:c8:9b:20:6f:3f:41:c2:
                    8e:e8:3f:97:71:70:a8:b7:92:1d:1b:bd:a5:89:34:
                    d3:86:8d:47:27:35:9e:56:53:36:21:db:77:11:c0:
                    fa:90:8e:74:96:5c:71:cd:04:f2:c0:47:14:96:ab:
                    ee:1a:37:72:80:12:d0:f5:eb:d1:26:01:56:80:19:
                    a3:31:2e:77:4d:77:f6:7a:8f:d7:e9:a2:6b:af:fb:
                    fa:7b:bd:11:79:35:47:14:ac:c0:f5:bf:47:3e:34:
                    4e:0a:e3:bc:26:d9:1d:50:b6:2b:41:3e:1d:3a:c1:
                    09:e1:0b:c9:ca:41:bc:a1:02:90:86:2b:b0:10:a8:
                    fd:14:f4:34:ec:12:ca:ac:96:51:d3:14:a7:f4:f4:
                    40:9b:02:ff:99:2d:db:a0:c0:18:2f:b6:a1:5f:7c:
                    71:14:0a:6e:be:94:46:5f:73:21:90:9a:e9:f0:0e:
                    1c:f4:ef:b8:6b:de:ba:c3:fd:c9:7f:da:d0:e5:7b:
                    da:7c:fe:1c:10:85:d2:b8:7f:f5:20:a3:5e:83:c1:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6E:EE:25:2B:06:14:A3:AC:2A:EF:FB:73:91:30:41:F1:B9:35:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b8f11-87f1-3da0-bc81-4efeff19aac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a9:43:ae:86:00:85:77:e5:71:6b:89:e3:25:c5:4c:e7:4e:
         d9:55:8b:f1:4f:67:70:5b:c8:5a:46:e8:0c:1c:2f:8a:76:20:
         84:73:c8:d7:ff:74:c6:a5:63:15:c1:46:cf:1c:d0:2e:c6:b4:
         ae:02:6b:0c:75:e1:d7:fb:32:52:c1:92:78:ee:77:6e:93:df:
         af:ea:a6:e4:85:cd:04:6a:95:e4:b4:b4:d3:40:46:88:53:32:
         49:b4:83:c1:22:15:55:dd:d4:3e:d6:9a:06:81:13:a7:e5:62:
         a2:41:ee:12:3e:ee:db:9f:09:18:f9:37:72:6a:4c:80:69:8a:
         6c:fe:85:c2:fb:5c:85:6e:93:76:7f:d9:40:d3:0a:70:28:ad:
         50:dc:b7:cf:b5:7f:92:12:85:48:51:a0:81:f9:fc:52:67:0b:
         3d:fa:6e:29:b1:f5:bd:14:94:cd:f6:3e:e3:e3:95:3f:d1:a9:
         51:96:2b:48:cc:3f:db:87:b9:43:ba:c0:1e:14:de:c8:1a:d6:
         24:13:d1:06:a2:d2:0c:11:2a:c1:85:5e:c5:f4:22:7a:92:d5:
         a9:5f:3c:9f:bd:5e:9c:4c:74:8e:de:3a:8e:18:f0:81:25:83:
         f4:43:a0:45:da:dc:c0:42:34:ca:4a:ef:32:75:a7:06:6e:1a:
         29:67:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:22 2025 by rpki-client