Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa
File:                     62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa (raw, json)
Hash identifier:          hb1B5DvaURjvfQWUFjpHZjlvXvm3uqd8TcUj4x+m3YY=
Subject key identifier:   48:FF:EE:58:41:92:E3:53:8B:E6:5C:CC:38:69:FD:4E:A9:FA:51:90
Certificate issuer:       /CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
Certificate serial:       010D0C9F4328584A8410F529C2A91F21AB38F100
Authority key identifier: CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     8075
IP address blocks:        192.131.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f5:29:c2:a9:1f:21:ab:38:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ff9fa9ef-e044-402c-9456-7efb861c2960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:c7:17:62:9d:26:2c:55:0c:98:72:4e:21:
                    19:87:e8:36:46:45:89:03:d3:fe:6e:35:21:8c:36:
                    7a:62:b0:80:16:2a:6a:45:9d:58:40:f2:a6:29:7b:
                    af:37:5e:54:39:e8:51:13:0f:6e:6a:49:4e:c4:0f:
                    ac:04:a2:cc:b7:20:31:31:bd:ca:7f:f9:20:7a:c9:
                    cd:5f:c5:14:18:1e:10:cc:5c:7f:b0:6c:07:6e:36:
                    c9:f7:e7:83:b3:4b:48:70:fa:64:7a:db:a3:ac:4f:
                    ba:b9:f3:28:10:44:82:25:c2:bf:f9:74:1a:b6:ce:
                    14:61:17:3c:32:66:fc:c8:2e:57:c7:b6:cf:a2:e3:
                    db:ce:50:54:fb:d5:6b:0f:93:72:41:94:30:8f:ed:
                    b7:a2:a4:0e:7a:8f:7a:0a:6c:52:ab:44:a3:79:c9:
                    bd:d0:30:55:f4:bc:6b:72:ca:e6:4e:92:85:71:4f:
                    2f:a7:bb:ac:0f:49:92:84:6c:57:62:08:4e:8e:92:
                    ca:2e:8f:14:0d:c7:14:58:45:46:b6:b3:bd:3c:a6:
                    a7:90:88:27:98:8b:e2:77:8d:08:63:e9:5d:1f:4a:
                    8b:66:ab:86:83:61:9f:c4:89:be:70:0a:b1:e1:81:
                    41:0d:f0:63:cc:63:87:80:49:ad:f5:48:27:06:83:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:EE:58:41:92:E3:53:8B:E6:5C:CC:38:69:FD:4E:A9:FA:51:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl

            X509v3 Authority Key Identifier:
                keyid:CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:98:72:4e:4b:6c:e9:99:5d:9c:e5:bc:41:8b:5d:d2:5d:
         8c:14:b0:27:b2:ee:8e:92:bf:c9:e2:8c:f9:b6:2b:7b:20:20:
         16:98:4d:73:ce:a6:cd:25:42:58:66:27:eb:68:73:d9:2e:60:
         0f:bd:6b:a5:75:3e:bc:4a:6b:ae:ce:99:fe:8a:3f:c9:6d:b8:
         2f:f0:3b:08:51:f7:b7:85:8b:3e:69:c9:05:60:72:85:8c:33:
         7c:38:9a:bd:df:77:5d:5e:dc:77:f1:a3:68:d6:af:9f:b7:4c:
         45:09:0b:d7:d0:a8:d4:6c:b1:ca:a9:2c:7f:0f:24:dd:c3:d8:
         13:2a:ce:47:22:61:dc:89:ca:b9:21:ad:20:02:ef:7e:16:bc:
         5d:bd:93:5e:ce:12:22:96:c0:da:a8:e3:f9:f6:1c:60:0f:9d:
         a8:e2:57:72:bc:d6:06:0e:d3:98:24:11:76:11:08:d3:4a:0b:
         c9:dc:cf:b1:c2:5e:92:b8:c2:e0:30:24:90:cc:b9:e2:24:8f:
         ff:5a:07:65:aa:94:2f:2d:bd:03:90:e0:f3:74:d6:5b:a9:69:
         3f:2a:83:da:40:c9:5e:f0:7a:ac:df:83:7a:29:13:64:6f:c8:
         f8:07:48:4f:7b:33:c2:dd:6b:2b:89:40:d0:88:51:12:6d:6f:
         87:ca:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:17:16 2025 by rpki-client