Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa
File:                     fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa (raw, json)
Hash identifier:          dP6RQeljWa0tCZftMuoLYy8K28/Y1hFgaRhNLHpS0pM=
Subject key identifier:   D3:03:7E:3F:9F:CB:1F:A2:9E:AA:89:4D:D1:94:44:C7:56:9F:8C:64
Certificate issuer:       /CN=58520fc1-e07b-4b1b-ad59-5756198c9756
Certificate serial:       010D0C9F4328584B23317E6E8108199F253CF380
Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        199.181.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:7e:6e:81:08:19:9f:25:3c:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=fab115b4-419a-4d2b-be12-b0586bc11798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:aa:11:fa:21:63:25:cf:e3:11:45:27:c2:
                    0a:a4:44:4b:b4:24:3a:db:e9:09:db:4b:11:79:d2:
                    09:de:6d:d2:20:fd:50:a5:38:f5:e2:bd:29:8b:d8:
                    64:58:92:d1:f6:70:c7:6f:05:de:8d:fd:20:a9:0a:
                    50:bd:57:a3:cf:34:9c:84:ce:90:e2:b7:dd:27:bc:
                    b1:8c:fb:4b:1c:90:18:d0:77:88:cf:af:5c:e6:79:
                    43:5e:b8:e9:11:4e:fa:a4:41:7e:09:17:00:7c:4b:
                    e2:c3:fe:6f:ae:c3:7b:b1:ec:4b:ae:27:e2:e7:b3:
                    6a:35:9d:4e:34:5f:93:86:c3:f1:c9:8e:ff:6f:59:
                    a3:d3:d9:5c:91:5e:c3:65:c0:42:ef:43:52:2e:3a:
                    52:c3:22:1d:2d:a0:08:63:19:af:95:2b:6b:66:90:
                    d3:49:dc:05:0c:f1:36:1c:78:2b:d9:41:39:1f:59:
                    36:fd:48:9a:fe:72:ef:84:6c:bd:df:0d:bc:6d:53:
                    b4:de:a4:64:6b:91:ea:77:39:03:ce:dc:69:f5:f1:
                    75:0b:f3:77:b5:4a:bf:af:9b:58:51:ba:3f:af:99:
                    e9:cf:3b:32:17:79:29:11:40:19:7f:ae:76:b3:34:
                    b3:88:1d:b7:73:b0:1e:15:40:43:0b:fe:48:75:79:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:7E:3F:9F:CB:1F:A2:9E:AA:89:4D:D1:94:44:C7:56:9F:8C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:34:24:61:f0:60:d8:ef:8a:41:3d:2e:14:2a:72:b8:bd:d1:
         7b:62:7d:34:09:83:4e:60:84:11:08:22:b4:2b:18:97:9f:62:
         43:bb:00:21:fc:4e:ff:6f:4b:2d:ed:b4:c7:6c:a5:e2:8d:b3:
         37:9a:d1:a5:90:d5:79:ba:1f:dc:c2:36:9c:db:c5:78:f0:d1:
         36:44:a7:83:b0:8d:b6:5e:43:ba:14:36:75:01:83:72:9d:bb:
         77:33:a3:4d:31:02:71:fe:0f:34:9b:bf:09:1f:13:e1:e7:a1:
         ff:5c:ab:b4:42:97:90:fa:57:37:b5:07:5a:ff:f0:c2:58:9c:
         7e:4d:ee:f0:83:e9:e0:06:e9:b3:47:95:0c:b1:f9:a1:95:e4:
         0c:68:e9:dc:7a:63:d0:c0:65:cc:6d:9a:73:64:83:4c:a7:c7:
         7f:1a:e1:c6:26:66:06:80:68:01:17:aa:ef:ab:6d:1c:28:3a:
         ec:a4:f5:19:da:94:6d:64:5a:10:3f:dd:71:fb:2a:b6:4a:ea:
         57:2e:0a:d1:80:74:57:bb:36:e1:9f:6f:eb:db:56:8a:f0:f1:
         57:6d:06:10:e1:bd:e9:8c:f5:77:24:af:05:5d:ec:05:8d:d5:
         c3:24:1e:1b:72:52:7e:18:fd:84:b2:fa:92:25:22:15:93:97:
         14:90:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:09 2025 by rpki-client