Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa
File:                     19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa (raw, json)
Hash identifier:          D60mcr1SBwEwCcE6eVrskIlBpFK5TqfC2CXlUgfl8lQ=
Subject key identifier:   01:64:1F:AD:BD:B7:44:B3:A0:7A:FB:83:43:30:35:17:2E:3F:D3:9B
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584A778088CE311C918EBD5E5A7E
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     125
IP address blocks:        199.64.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:88:ce:31:1c:91:8e:bd:5e:5a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=de6f0f6d-ce82-47e4-b2db-6878079d70d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:55:c2:34:48:3a:07:71:e4:9a:c8:33:04:
                    95:4c:0a:d6:a4:20:2d:cd:48:d2:5d:df:e2:f2:d8:
                    c2:4a:05:04:d8:6d:13:16:dd:bd:23:1b:26:f3:6a:
                    44:4d:46:90:52:cf:4d:bb:6d:81:5e:d4:bd:d2:e9:
                    cc:d5:1f:d5:f0:17:8d:f7:2f:dc:78:32:71:b2:1d:
                    ad:46:4e:9b:6b:72:7b:98:35:31:a2:64:54:6e:76:
                    79:f0:24:69:79:30:bc:e2:bc:1d:33:4b:21:e3:f1:
                    b2:8b:17:cc:b3:39:d0:63:1e:12:04:0d:8d:69:99:
                    7f:48:24:e5:00:57:fd:b8:29:1b:68:14:1b:7f:37:
                    4c:a0:a7:99:4c:94:ed:27:0d:a6:ea:1c:f6:5c:2b:
                    ca:9b:40:8c:d2:e8:59:4a:73:46:70:e4:4a:9e:56:
                    b6:55:96:29:01:6c:84:64:86:b2:23:fd:53:0a:cc:
                    63:1f:51:a0:71:ce:04:34:a3:dd:47:9e:51:aa:c9:
                    3c:dd:fb:f4:85:d5:2a:e8:94:4b:ea:46:98:f0:01:
                    e3:ba:9f:b4:73:12:c1:53:7a:ef:73:b5:f5:b3:5f:
                    34:89:ab:4f:13:f7:b8:70:4f:53:f4:7d:93:f9:03:
                    9b:16:c6:16:d6:7c:f5:2a:5f:82:7d:c2:ec:0e:b0:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:1F:AD:BD:B7:44:B3:A0:7A:FB:83:43:30:35:17:2E:3F:D3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:72:70:48:8d:45:b4:a7:ea:e2:87:ed:b1:78:90:26:a1:
         45:1b:46:69:7a:f9:ae:a3:56:87:91:08:4f:09:ab:57:fe:c5:
         ab:83:96:d4:84:15:2b:fa:5b:d0:86:dc:25:90:29:ba:53:3b:
         8f:de:03:8c:90:89:48:66:2b:b5:66:4e:60:9b:bf:14:8e:42:
         89:9e:93:e6:47:54:95:63:34:ba:cd:af:5d:e4:e9:95:62:52:
         66:d5:9c:59:30:c6:f6:89:71:5c:c6:2a:9f:8c:70:c5:2b:56:
         6c:5c:28:06:b3:cf:1a:31:b3:78:e0:e8:43:52:d8:58:8c:50:
         6b:47:98:7a:05:ad:16:e1:f1:7b:5b:9c:25:3d:10:6b:98:e9:
         ab:b2:fb:ba:ae:5e:64:5c:9f:f3:a9:64:92:b2:9e:b7:95:6f:
         f9:52:e3:fd:d5:7b:70:d9:dd:0d:54:09:43:8b:33:f1:97:b0:
         6f:03:47:11:84:cf:d2:7e:f3:7e:cd:f5:b2:46:f4:5a:d7:43:
         76:dc:00:1e:03:e7:ea:d1:2a:45:ea:63:e2:ce:27:d2:79:da:
         ea:7f:81:48:ee:45:b3:03:da:ed:f3:19:b2:8b:11:61:93:e6:
         e1:34:c8:6b:f0:2d:6b:61:ab:1f:d6:0d:cf:07:5c:e6:39:68:
         5a:40:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:34 2025 by rpki-client