Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/9b0ad40a-a266-32e0-8ca5-e29af279fdd0.roa
File:                     9b0ad40a-a266-32e0-8ca5-e29af279fdd0.roa (raw, json)
Hash identifier:          +xhvHbj77wtg2KQKTqLVJLpjEINrt5v+iS8lAZK/bJ4=
Subject key identifier:   7D:AC:A0:48:00:81:5F:4A:E6:01:A3:C9:32:02:C5:6E:A9:BA:3F:60
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F4328584A600E6C4ACC06B8AE7EC70400
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/9b0ad40a-a266-32e0-8ca5-e29af279fdd0.roa
Signing time:             Tue 01 Jul 2025 15:27:25 +0000
ROA not before:           Tue 01 Jul 2025 15:27:25 +0000
ROA not after:            Mon 29 Sep 2025 15:27:25 +0000
asID:                     5065
IP address blocks:        192.190.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:0e:6c:4a:cc:06:b8:ae:7e:c7:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Jul  1 15:27:25 2025 GMT
            Not After : Sep 29 15:27:25 2025 GMT
        Subject: CN=9c689ab6-46b2-4093-90c5-d07566134cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:73:2b:14:63:3a:c1:27:a4:71:db:59:38:
                    fb:8a:19:4b:45:9c:2f:b5:6d:bc:69:e0:ed:9c:4b:
                    b5:e4:38:ee:04:ea:61:74:85:c2:04:72:64:be:b7:
                    1f:46:8e:2d:69:30:bb:d6:a1:3a:2c:81:57:84:e6:
                    62:b3:b5:37:d3:e6:8e:f3:df:86:44:47:b2:40:8c:
                    fc:2f:00:23:be:2d:59:90:45:92:8f:8d:5a:16:e4:
                    3d:91:ee:8a:f4:ef:52:24:fc:db:d4:06:86:1e:37:
                    90:8e:69:1f:70:c6:6f:26:10:02:30:39:b6:a8:93:
                    8a:a7:2f:e1:db:f6:1b:44:4f:d0:2f:27:cb:ae:3a:
                    05:98:19:f5:9b:50:2d:d3:ad:3c:11:44:00:ca:04:
                    aa:8c:c2:2d:03:56:7c:2f:ce:d8:c0:d7:d6:4f:51:
                    d7:ca:65:8e:b9:78:3a:fb:85:76:54:a7:c7:62:5e:
                    77:09:bc:ce:ad:0a:fa:ff:bd:27:f4:6d:bc:48:8f:
                    63:37:79:35:9f:6c:dc:fb:13:1c:98:15:82:c2:6f:
                    ea:2a:08:df:2a:67:7d:9f:ee:58:be:ab:88:79:3a:
                    13:68:2a:0d:22:d6:65:cb:af:31:77:a2:ab:c2:11:
                    f0:32:b9:74:49:43:ff:80:2b:39:14:b7:2f:8f:2a:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:A0:48:00:81:5F:4A:E6:01:A3:C9:32:02:C5:6E:A9:BA:3F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/9b0ad40a-a266-32e0-8ca5-e29af279fdd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a8:db:8e:bc:05:d7:b0:b6:e4:ab:ee:4d:8d:76:0f:8d:1b:
         9f:f1:55:dc:56:1c:eb:73:17:a4:58:4b:90:96:f8:96:7d:31:
         04:dc:7d:bc:4e:59:45:3d:46:13:01:f5:4c:e8:70:b8:04:2a:
         6d:98:80:75:7f:8a:14:fc:ef:c5:1d:85:63:1e:5b:55:e8:49:
         10:3f:04:7a:13:67:53:5f:cd:59:b6:86:47:1d:c2:cc:3d:27:
         0c:46:3c:05:7d:83:2f:0e:00:50:fd:1d:5c:12:5e:35:81:a6:
         12:3c:aa:05:1c:53:b4:19:58:5c:3d:a9:e7:a8:7e:e7:43:d8:
         ff:ca:89:75:a8:50:e1:09:81:c6:28:bd:49:06:a3:9a:24:bb:
         37:77:92:c5:a0:4c:49:e2:6f:42:bc:ab:5f:d4:01:9c:6e:13:
         6d:c3:30:b4:7c:6b:ee:40:1b:2d:c5:d9:5a:40:2d:c0:bb:27:
         3c:4b:d8:95:f7:81:92:b6:06:0f:af:d9:de:19:1c:70:52:cc:
         b0:0d:fe:52:33:e0:14:dc:86:bd:e2:17:67:8c:22:81:54:dd:
         72:df:83:3b:45:79:89:44:3d:e7:8b:06:2c:e8:cb:96:1c:97:
         f8:a6:e2:b9:77:54:c0:72:bd:2d:fe:53:df:74:4e:a1:60:33:
         ae:91:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:40 2025 by rpki-client