Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/372c18e7-9822-3b73-a71f-f542d7fac505.roa
File:                     372c18e7-9822-3b73-a71f-f542d7fac505.roa (raw, json)
Hash identifier:          Pp+zaCzrNPnwYyItbPG2yJ8IW6U0dEldo3qokD12VXA=
Subject key identifier:   D4:28:69:B4:60:F4:FD:2A:02:7D:8A:37:7D:E0:25:80:3A:DC:17:52
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B7A32E7832ECD9B4B6948E780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/372c18e7-9822-3b73-a71f-f542d7fac505.roa
Signing time:             Fri 10 Oct 2025 16:58:53 +0000
ROA not before:           Fri 10 Oct 2025 16:58:53 +0000
ROA not after:            Thu 08 Jan 2026 17:58:53 +0000
asID:                     210554
IP address blocks:        198.89.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:32:e7:83:2e:cd:9b:4b:69:48:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 10 16:58:53 2025 GMT
            Not After : Jan  8 17:58:53 2026 GMT
        Subject: CN=8b0a4a51-b6ea-418c-82be-2ffc1ea8609e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:32:95:d3:f7:ed:f2:70:36:45:17:af:ea:
                    b0:d3:dd:c6:2c:d4:91:32:83:8d:8f:f5:82:c5:50:
                    ca:76:95:69:f6:b2:63:e4:b3:6b:12:c2:d1:23:91:
                    a7:d5:d5:b8:ba:74:bf:e1:7d:3b:c9:07:fc:15:b0:
                    ff:60:e9:f0:6d:79:b3:fb:d1:51:68:a1:1a:83:81:
                    0a:d0:71:d2:e5:77:31:7b:e7:53:09:de:e5:58:4c:
                    34:76:9b:9c:64:da:96:74:47:8f:7e:f2:72:5a:61:
                    c4:aa:1f:32:88:9b:03:c9:04:ed:af:de:54:96:30:
                    e6:df:37:7b:7f:8f:81:09:ba:e6:6e:9c:de:38:d3:
                    ca:00:91:c7:fc:7e:4d:f4:34:3d:6f:78:e4:04:06:
                    ea:83:80:48:07:bb:d2:d4:9f:d1:22:10:a6:3f:e3:
                    3f:67:82:d1:a5:7d:d5:60:88:a0:ca:51:6f:9a:75:
                    73:af:e6:26:1d:0d:bb:14:d3:4d:2a:6f:9c:3c:64:
                    33:00:0e:1b:99:78:25:76:65:3f:bc:a1:78:a9:b8:
                    3b:21:01:86:e7:6d:45:98:bb:ac:8b:04:1d:c5:d9:
                    85:14:56:e7:2a:98:60:3a:79:bb:93:6b:26:00:f7:
                    9a:15:9e:50:80:62:71:68:3b:b8:6f:a8:00:01:d1:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:69:B4:60:F4:FD:2A:02:7D:8A:37:7D:E0:25:80:3A:DC:17:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/372c18e7-9822-3b73-a71f-f542d7fac505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:ae:a7:b0:c9:ca:be:a4:85:75:47:48:28:34:91:97:c2:ab:
         f4:b4:e0:12:a6:3c:bd:b0:8a:2f:ac:2e:66:6a:fa:8f:f2:a0:
         e3:a5:f7:e1:f9:c9:25:2b:e8:30:7a:11:22:99:ce:aa:41:94:
         1b:5d:0a:93:fe:f7:e3:76:ee:52:fe:95:d4:43:0a:bc:0d:b4:
         a4:e9:58:40:94:d9:0d:1f:7c:c7:8e:58:d1:34:5d:e9:22:63:
         89:bb:38:58:f9:3d:7d:94:4a:f4:42:de:b6:fe:6d:44:9c:ce:
         1a:4b:4f:70:b8:1d:3d:c9:5d:bb:a3:d6:1a:af:d0:ad:f2:53:
         9c:c8:2f:e4:0c:30:c9:ce:7c:68:27:5f:92:a2:c0:4f:24:7b:
         f7:76:d2:fc:44:49:5d:7c:dc:b2:5b:c7:26:7e:0c:11:ec:9f:
         7b:d8:dc:47:af:bc:8c:7b:9f:79:23:53:ec:81:78:14:4c:96:
         32:d9:7c:11:c1:8d:59:e1:55:08:ad:47:08:f9:b3:08:02:2f:
         45:a0:e5:da:20:d1:d2:28:a0:ac:3c:80:b8:f9:50:06:84:14:
         04:d9:78:90:3a:e3:22:2c:c3:c6:7c:b7:1f:49:96:70:c3:47:
         3f:c3:2c:91:d3:06:b4:ea:0c:ee:9f:a1:0a:24:e0:dc:b2:4b:
         8a:f3:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:32:00 2025 by rpki-client