Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa
File:                     a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa (raw, json)
Hash identifier:          DlqkXIswB5RO0TWbeyDLrL+4Tjdy4BmZ88dpZwDAPyw=
Subject key identifier:   6B:B3:6E:7E:03:33:48:66:74:67:C2:5F:57:58:0B:4F:0F:B9:A6:85
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584B291CAA14750DED6968222200
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa
Signing time:             Thu 11 Sep 2025 15:53:36 +0000
ROA not before:           Thu 11 Sep 2025 15:53:36 +0000
ROA not after:            Wed 10 Dec 2025 16:53:36 +0000
asID:                     55286
IP address blocks:        192.241.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:1c:aa:14:75:0d:ed:69:68:22:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Sep 11 15:53:36 2025 GMT
            Not After : Dec 10 16:53:36 2025 GMT
        Subject: CN=912f545a-f921-4309-a4dc-46a0e5f4c86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:88:eb:07:d3:6f:1a:20:5f:1c:ee:e8:7e:
                    8a:41:3f:c1:61:cf:58:9e:13:22:ee:2c:d5:20:0b:
                    a3:3a:b5:ab:1d:7a:74:13:74:16:c9:a4:85:b4:9d:
                    23:08:9e:9f:c8:75:82:7f:bd:a7:8d:32:97:38:bb:
                    da:b2:20:83:70:24:0f:3d:a9:63:99:b9:fc:7d:c8:
                    a9:31:cd:11:a7:71:b6:e4:7c:9b:1a:88:a4:95:8b:
                    bb:85:4e:2c:45:f8:f7:7d:ff:ae:61:71:16:6d:3c:
                    01:61:36:4a:0a:b5:57:6d:2e:80:0b:53:40:02:7f:
                    62:82:39:01:22:70:b8:ce:f2:be:97:83:90:3b:36:
                    85:7a:26:7b:10:55:46:a6:55:0c:08:bc:aa:03:72:
                    df:57:b3:1e:1c:bb:01:22:69:1a:9e:0e:ca:c8:fd:
                    29:62:41:8d:84:9e:3e:42:57:1f:16:b7:bc:54:b4:
                    7a:84:8e:e6:63:29:a9:71:27:b0:d9:42:69:10:f0:
                    fc:19:49:35:7b:4c:9f:20:f6:47:8d:da:5b:9e:17:
                    a3:f7:cf:55:bf:37:5d:c3:6d:6a:f9:ad:97:a3:03:
                    0d:a2:fb:80:f0:f6:27:a1:4e:23:02:45:41:11:06:
                    d3:ef:1a:0c:ae:8c:79:ee:7b:16:97:4c:f3:b8:d4:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B3:6E:7E:03:33:48:66:74:67:C2:5F:57:58:0B:4F:0F:B9:A6:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.241.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:7e:1f:1c:1c:51:5c:cd:35:a6:29:05:eb:b1:53:78:5c:21:
         8e:ba:6b:18:00:23:7d:4c:2b:c9:39:69:3c:2b:9a:d3:c3:c0:
         a7:62:a7:ea:ee:40:24:08:e2:c0:b6:5e:d0:1c:b8:68:e7:4d:
         0b:87:c6:dc:d2:b9:1d:82:ec:5e:02:73:7b:fc:b7:85:cd:bf:
         33:72:a6:5b:41:e3:4b:b4:a6:b6:dd:13:c4:af:cc:bc:71:7b:
         e8:aa:bc:38:ca:60:27:40:70:2f:fc:96:db:6a:87:58:70:c4:
         df:57:07:64:6c:6c:74:07:a2:45:6b:16:cf:0b:3c:30:75:6a:
         07:ac:7d:c4:97:c0:fc:39:d9:ee:38:4a:0e:5c:36:bf:3e:12:
         63:f1:f5:23:b3:77:c5:82:0c:9f:d8:8f:e4:42:4d:fd:3e:99:
         df:2a:1f:07:77:38:da:9f:a5:2e:e6:61:c2:54:b2:f4:df:8a:
         19:93:6d:ba:be:ce:c4:6d:45:37:3e:74:ac:4a:1f:ca:15:41:
         26:c8:d6:74:f0:f3:67:7e:0f:ab:c0:a6:e3:dc:d0:8c:d5:aa:
         32:8e:c0:41:7f:7f:b0:e5:f5:f6:ae:aa:b8:ae:6f:01:0e:10:
         bf:cb:4a:3f:e7:b0:4a:9f:5a:cd:08:9c:7c:8b:12:64:a4:b8:
         6e:91:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 07:41:58 2025 by rpki-client