Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/adb6e3a1-3985-3e8d-a2fc-2f31f9c09a88.roa
File:                     adb6e3a1-3985-3e8d-a2fc-2f31f9c09a88.roa (raw, json)
Hash identifier:          J8o2aaaR9IPe58eZC35zLY9URqFnEFkQkrMtgccMjhg=
Subject key identifier:   32:BF:C7:14:5E:66:7A:7F:74:AE:F8:CF:18:18:91:BD:86:23:3D:B9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584B2FC198A9B67504BE7BA6F6C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/adb6e3a1-3985-3e8d-a2fc-2f31f9c09a88.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     1742
IP address blocks:        199.94.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:98:a9:b6:75:04:be:7b:a6:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=a9dba7c4-45e7-4a82-9d04-1eb620460d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:85:42:58:88:81:1d:40:e2:17:cf:73:86:
                    05:29:54:cf:1d:10:2b:a3:82:f8:c4:89:08:f6:c0:
                    9b:f5:7b:91:72:96:b5:ee:05:56:21:13:20:09:56:
                    99:22:e5:90:be:6e:d2:19:c6:1d:67:b2:a5:4e:4b:
                    f2:e6:56:eb:c8:69:a0:72:93:85:d8:ac:0d:14:db:
                    a4:0e:69:0d:57:a6:74:b1:cd:9d:9c:00:c3:12:e5:
                    8f:05:b8:2c:13:16:da:6f:75:1b:48:47:82:27:ed:
                    b7:0b:37:45:96:bb:ec:a8:b4:05:09:50:61:07:39:
                    91:2a:dc:86:74:93:9a:03:c4:98:e6:6e:44:ca:00:
                    68:1b:04:53:91:be:41:b7:d6:8f:b3:d3:85:d1:86:
                    73:59:91:97:8b:d1:b7:f3:33:55:44:38:a9:66:45:
                    34:29:a0:ca:fb:e5:d0:a1:f3:ea:2c:e0:b8:08:5d:
                    01:b2:b8:f4:f6:00:1a:c6:83:d5:ec:17:09:25:da:
                    d6:7e:49:c9:07:f4:36:a7:53:35:7b:27:3e:b4:49:
                    ea:cf:86:2a:22:59:9b:3b:c4:d4:2a:70:e6:ce:fd:
                    b7:88:5b:9c:68:91:96:36:1d:ec:4d:20:12:70:14:
                    67:78:b2:d1:18:08:ca:45:ab:78:db:3c:4b:cd:8c:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BF:C7:14:5E:66:7A:7F:74:AE:F8:CF:18:18:91:BD:86:23:3D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/adb6e3a1-3985-3e8d-a2fc-2f31f9c09a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:39:c2:92:20:7d:34:2b:5e:6b:ad:fc:22:b0:37:42:d3:
         2b:c0:b1:e2:b1:09:7a:49:9f:ad:80:ae:29:73:55:f0:01:f8:
         f1:02:65:e9:3f:c2:31:f8:db:57:7d:cf:b8:d4:fb:2d:71:80:
         53:1b:16:b6:48:93:55:bf:cb:ed:88:62:93:45:9e:f3:12:1b:
         b8:58:01:b1:83:87:02:fe:4c:1a:6e:e0:3e:5a:9a:4e:e8:35:
         d4:77:9d:d1:b1:15:fc:9e:ef:e9:79:58:e8:87:ce:86:28:a4:
         c8:15:0c:35:e5:86:27:12:94:b3:68:31:1e:31:38:2f:ab:1a:
         d6:ae:94:d1:58:56:46:0c:e9:fe:70:5f:c0:6b:20:35:18:ed:
         6a:97:d1:b3:42:d6:fc:96:fd:9c:05:2c:3b:71:4e:da:78:6f:
         fb:4b:5d:0b:61:f9:cb:44:a3:c8:7f:db:36:d4:42:31:c5:8c:
         fd:7f:42:e6:1f:6f:ec:a7:cb:a8:d8:83:ab:60:48:df:37:11:
         f0:ca:0d:aa:6e:9e:ef:90:4a:34:7a:c1:b8:a8:f9:38:b6:fe:
         0f:01:cc:4e:e1:f9:ba:89:0a:b0:b4:78:00:a6:85:96:2b:b4:
         e6:35:c1:35:15:e6:0e:c0:60:db:6d:f1:a6:87:af:ed:2a:e9:
         27:2d:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:13:55 2025 by rpki-client