Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa
File:                     c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa (raw, json)
Hash identifier:          zgH26scUYOVjG1G3LGWH9xTIgbefxYyiFIEvBePI+xQ=
Subject key identifier:   63:56:1C:31:64:2E:9D:F9:11:FE:AD:A5:C0:36:44:64:61:62:C7:85
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584A62DF10C9C02C476E146ED800
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa
Signing time:             Wed 02 Jul 2025 15:39:26 +0000
ROA not before:           Wed 02 Jul 2025 15:39:26 +0000
ROA not after:            Tue 30 Sep 2025 15:39:26 +0000
asID:                     32806
IP address blocks:        192.187.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:df:10:c9:c0:2c:47:6e:14:6e:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Jul  2 15:39:26 2025 GMT
            Not After : Sep 30 15:39:26 2025 GMT
        Subject: CN=97f667d3-af1b-4e31-8655-18a6a0e06437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:0d:c9:dc:7b:b8:81:b4:6f:c3:a0:78:f1:
                    64:09:71:40:2d:dc:8a:af:e1:04:41:3f:b3:1b:51:
                    2f:38:23:ee:c4:57:e8:c1:3e:3a:62:73:2c:5d:26:
                    a5:af:b6:dd:3d:ce:3e:34:4b:24:9a:70:9f:c1:3a:
                    3a:ec:41:a8:9a:ce:66:39:bb:1a:27:83:01:a4:a3:
                    7e:48:f9:f7:e9:f3:f2:9f:44:d4:80:82:3f:6f:14:
                    10:9b:35:fc:a2:10:92:6e:30:fe:83:f4:8f:ed:3e:
                    76:6d:b1:ee:10:28:37:c0:98:ef:14:ad:5e:5b:a1:
                    43:4f:93:5a:a5:62:bf:83:aa:6a:d9:95:f4:05:eb:
                    02:4d:25:db:74:d4:61:7b:bb:5e:53:54:f1:05:63:
                    a6:23:b5:8a:56:2e:4b:39:fa:8b:c5:37:85:25:af:
                    bd:bd:90:dd:a7:6b:37:74:d4:bb:9b:71:27:cb:27:
                    af:af:c8:e3:02:80:0d:de:ea:4a:d3:51:30:f4:ed:
                    d7:c9:2f:07:8f:c9:f6:56:d0:19:3e:9b:7c:8f:34:
                    a2:65:17:14:84:69:40:06:17:22:a1:2f:30:2b:c6:
                    84:99:9c:fc:ba:4f:07:01:ed:33:e6:74:96:b9:f1:
                    9e:e9:62:f2:0f:35:cb:9b:3f:fe:a9:6b:54:08:c9:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:56:1C:31:64:2E:9D:F9:11:FE:AD:A5:C0:36:44:64:61:62:C7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:cc:08:7d:22:16:5f:88:da:47:8b:40:ab:94:1f:c6:0f:
         f0:e1:1c:d5:a2:2d:59:94:db:b4:5d:cd:4a:0f:5c:71:01:25:
         1a:d4:14:0f:a6:32:2c:98:6d:62:3c:b3:e8:0e:22:be:3f:1c:
         da:2f:5f:09:d1:c4:82:50:5e:63:7a:dd:42:7c:56:ff:50:b0:
         b8:7c:15:0e:5e:20:99:11:f6:6e:99:fe:ae:f7:9c:67:02:5a:
         56:ed:5d:e6:f1:28:72:d7:81:f2:ea:19:de:cd:2c:8d:ac:a8:
         58:ea:1f:d0:66:96:48:15:7b:0f:f8:f7:07:26:de:20:56:e7:
         46:d4:08:f9:2e:08:db:dc:c6:25:d3:55:d1:fa:34:03:f1:7d:
         93:50:4a:b0:9a:39:ea:4c:04:ad:05:3c:16:60:f9:bf:d0:b1:
         7f:85:5a:0e:a3:32:ea:37:b7:53:b8:cd:61:d9:2f:b7:b2:9c:
         d0:14:bb:4b:f1:94:9f:10:2a:8a:5c:fd:0b:4a:c6:6c:07:e3:
         d1:ce:e3:ce:ca:ec:7b:d8:a4:31:e9:34:52:d4:c9:89:e1:06:
         c2:61:19:62:50:57:b9:93:1d:ca:48:eb:38:fa:87:5b:7f:4d:
         79:3e:48:4e:90:7b:4e:1d:ec:bb:92:e1:de:9b:6b:2a:7c:f5:
         1b:34:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:30:40 2025 by rpki-client