Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa
File:                     fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa (raw, json)
Hash identifier:          IgwadtpVvdspm5T5mBr/nMuLH7KLc/duJIt0hNZbb4k=
Subject key identifier:   7E:EC:4B:13:4E:D3:45:5A:4E:1F:12:05:20:16:B7:6C:85:40:63:B9
Certificate issuer:       /CN=58520fc1-e07b-4b1b-ad59-5756198c9756
Certificate serial:       010D0C9F4328584B153C2843855A977FD5471100
Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        199.181.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:28:43:85:5a:97:7f:d5:47:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=0fe757fd-b1b6-47ad-a583-ae09287e7b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:13:11:33:75:60:b4:46:99:2f:63:74:99:
                    80:f7:47:69:c0:04:b5:62:df:e2:a3:17:8c:45:df:
                    46:bf:71:10:eb:3d:4d:3a:04:e0:c1:eb:3a:a7:8b:
                    23:5d:7c:c2:a9:9f:58:d6:81:05:88:a4:47:ed:cd:
                    2d:32:41:47:6d:b5:a7:83:ea:a9:1a:ce:b5:d4:82:
                    77:38:82:26:39:f2:25:03:d6:2e:d4:8f:d3:5e:71:
                    96:27:fd:4b:ab:90:6e:1e:29:35:84:31:a1:ce:0c:
                    02:9a:7c:6e:5f:9b:da:07:96:d5:e3:0d:88:a3:77:
                    bd:ef:3b:85:dd:78:73:05:97:be:3b:14:07:b9:10:
                    7a:91:b6:c4:d9:31:5a:49:f3:1c:27:aa:88:93:25:
                    c6:35:57:ae:57:9a:49:51:b2:24:09:80:cf:a7:64:
                    66:81:56:35:4f:b7:6c:ca:07:88:de:93:05:48:b0:
                    59:13:b8:8d:a3:b7:ca:9f:34:dd:95:1a:e8:76:0b:
                    96:b4:6e:fd:fe:80:cd:2e:70:82:36:52:43:bb:61:
                    83:86:cd:a1:9f:e3:be:35:83:35:90:00:c9:dc:ee:
                    eb:52:d0:db:de:da:7a:78:80:71:8c:12:54:32:7d:
                    dc:78:aa:92:07:ab:3c:02:c5:67:b1:cf:ac:c6:f1:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:4B:13:4E:D3:45:5A:4E:1F:12:05:20:16:B7:6C:85:40:63:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:03:58:c2:7f:07:a4:bd:9d:08:56:29:bc:3c:c9:38:aa:
         5d:c9:32:69:69:80:ee:44:26:74:0a:d1:94:3b:86:33:9e:12:
         ec:fd:41:bf:39:52:cc:f2:80:95:5a:35:b5:df:0d:23:c2:9a:
         34:6c:8b:6a:f2:8f:b8:f2:ba:bb:18:fa:0a:4e:eb:8b:ae:15:
         1c:d3:29:d1:e8:0d:a7:2d:4a:e1:18:c3:9a:8b:19:c6:19:10:
         69:55:2a:39:f2:9d:c3:48:26:dc:b8:fa:da:d5:0f:ec:3a:7f:
         79:6b:81:30:3d:80:d1:a3:3a:a1:dc:eb:95:7d:1f:75:cb:28:
         b7:ee:af:a0:ab:65:0b:bd:0a:39:b7:86:25:ce:e8:cb:95:2f:
         20:f4:10:df:f6:5d:fd:94:20:8e:8f:b5:20:c8:34:1d:72:56:
         3a:d5:97:36:50:a7:bc:b9:dc:71:c3:06:de:15:98:14:c0:74:
         b8:85:3f:3b:9f:ee:81:1a:02:92:52:e4:0d:2a:6b:e1:b2:37:
         91:a1:92:eb:b1:21:d5:bc:f0:01:7b:e7:48:33:37:9e:42:99:
         14:26:e0:ed:f1:c4:7c:c5:14:29:7e:bd:31:77:dd:fa:51:65:
         d6:29:79:49:e3:3c:97:b1:3e:e2:a0:04:b7:ee:09:71:7a:ef:
         b2:f8:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:27 2025 by rpki-client