Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa
File:                     bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa (raw, json)
Hash identifier:          4bvM2v5KSFaZXoKZzt2tCgxIR/DrPuJVSPESmJ4Ws54=
Subject key identifier:   BE:DC:F7:E7:3F:AE:18:A6:66:11:07:2F:62:B4:BB:1F:39:30:3B:28
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F935DCF5BE75CC92B780
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        199.232.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f9:35:dc:f5:be:75:cc:92:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=0ac11039-4e7e-47a2-964b-f19849bb6ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:46:5d:b1:70:7c:ab:5c:53:54:fe:a6:10:
                    8f:63:d4:6d:fa:91:f3:f5:a3:a5:b3:47:fa:17:8e:
                    31:b6:06:6e:f4:b8:f8:8d:b9:d2:e3:f5:77:25:8f:
                    6a:fc:9b:99:31:c0:15:11:ab:b8:3e:b5:0a:b2:4b:
                    1f:ce:11:5c:ba:ea:9d:89:25:cb:1b:37:80:4e:71:
                    ad:14:7d:39:fc:57:bd:13:ab:70:cb:4c:63:cf:88:
                    b2:8c:59:54:1b:59:56:84:12:bd:10:61:e3:53:e0:
                    9e:de:f7:83:79:6c:27:5c:0e:af:6c:93:5b:6c:33:
                    31:f6:6d:3b:1c:5f:7a:53:71:e7:a8:79:44:c3:b0:
                    ea:fd:90:25:cf:fe:be:73:17:33:72:9e:0b:ae:ee:
                    8c:bd:6c:1c:bc:0c:45:c6:b0:86:fd:8c:bd:18:98:
                    77:22:a1:76:9a:59:7a:bb:49:89:fb:c6:f3:7f:28:
                    51:f2:14:cd:50:f5:61:c7:f7:a3:2f:87:60:29:29:
                    02:f5:a9:4e:d9:2c:5f:02:40:9f:a9:dd:9a:37:1a:
                    6d:24:8e:75:eb:19:ae:30:04:c9:d5:0e:eb:cf:ee:
                    35:43:33:e7:6b:63:e2:84:69:fb:7e:c2:34:fc:38:
                    a0:2a:6b:31:ce:40:3e:6c:96:c4:7e:95:97:2f:46:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DC:F7:E7:3F:AE:18:A6:66:11:07:2F:62:B4:BB:1F:39:30:3B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:b5:01:8a:37:5f:7e:10:e9:88:16:5c:de:7b:cd:d0:38:
         a6:34:da:09:db:18:24:7e:a6:bd:dd:d1:12:78:02:15:8b:46:
         bf:b7:72:98:c9:bf:e8:fb:d0:1a:53:27:f3:04:13:98:28:67:
         d3:da:4d:0a:a3:f8:74:0d:c7:fa:67:0d:70:73:11:4c:5e:6b:
         92:30:d3:54:52:9b:e6:50:f4:a5:6d:2f:81:a5:91:20:d3:0d:
         30:25:3c:66:a4:50:1d:6d:c5:f1:4e:d3:38:95:59:f9:be:13:
         1b:db:a0:44:25:d8:b4:1c:c8:8b:7b:00:32:df:8a:ee:1e:e8:
         19:0b:26:2e:49:eb:83:31:70:0c:32:ac:0e:64:7f:35:7d:00:
         b7:a9:9b:ec:57:dc:72:36:18:d7:37:d5:b6:46:c3:66:ef:fe:
         40:8b:64:da:f7:45:f5:66:5a:c9:a5:74:ee:e9:08:13:01:f2:
         48:74:d6:15:30:1b:9c:ba:11:75:68:75:5f:a1:0e:c3:05:20:
         0b:20:14:36:a2:40:06:b0:df:49:8e:89:6a:ad:dd:68:1e:5a:
         a7:49:67:98:b4:f3:3b:7b:40:ca:87:36:f1:f5:68:a8:2e:d3:
         47:cc:8b:6d:ba:de:fd:63:5c:25:84:84:fb:fe:61:a5:41:55:
         48:d5:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:18 2025 by rpki-client