Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b554d9e-abe5-33b3-bac3-c40a6878b038.roa
File:                     7b554d9e-abe5-33b3-bac3-c40a6878b038.roa (raw, json)
Hash identifier:          vg9b8FDBzZjUKg3k0LtOgp8n7ujt1fCepuKnJKG4/DM=
Subject key identifier:   D3:48:23:C7:6E:65:AC:E0:A5:54:25:2A:91:A0:A7:01:69:45:EF:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DBF2B31F4BF015FD518C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b554d9e-abe5-33b3-bac3-c40a6878b038.roa
Signing time:             Tue 26 Aug 2025 12:32:10 +0000
ROA not before:           Tue 26 Aug 2025 12:32:10 +0000
ROA not after:            Mon 24 Nov 2025 13:32:10 +0000
asID:                     396613
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:bf:2b:31:f4:bf:01:5f:d5:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:10 2025 GMT
            Not After : Nov 24 13:32:10 2025 GMT
        Subject: CN=b6c16847-c215-4b23-ab0d-789e6a7c1765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:6c:35:70:40:f1:fd:28:d9:ce:3f:ae:63:
                    77:34:e9:ef:5e:1b:84:5b:eb:30:7f:be:e5:b4:a0:
                    11:16:84:6b:ed:4f:27:9b:19:a1:84:ab:a3:91:79:
                    0d:eb:d6:2a:1f:86:e4:9e:21:4d:fc:e4:80:76:4d:
                    de:63:78:dd:02:0d:56:b5:48:47:fa:9e:77:18:b6:
                    ac:63:54:1c:b1:c3:13:6e:80:25:05:33:05:a2:ea:
                    6d:57:b5:24:74:1e:7a:cb:ad:d2:0c:97:6c:06:05:
                    b8:49:dc:f9:51:bf:ab:89:c1:c7:af:97:fd:46:6b:
                    a1:1d:d4:84:cb:f8:c7:eb:4c:8e:8f:35:cc:86:3b:
                    0d:5c:89:67:7e:05:9e:be:1c:58:f0:62:c9:4e:57:
                    a1:09:e4:47:3f:89:70:b5:17:df:92:10:2d:34:7b:
                    be:8e:9e:c0:0c:84:6c:d9:91:54:a8:9b:a7:01:d5:
                    6b:7a:a7:57:54:7b:bb:21:5d:ff:d7:7d:f4:53:e8:
                    47:b8:b1:de:55:c5:6f:a1:4c:e7:b3:f9:70:1c:ab:
                    25:68:f5:10:dc:e7:0f:f5:03:e0:e5:db:7b:7d:8d:
                    2a:86:bc:68:96:74:de:a8:55:e9:08:cf:43:a5:70:
                    e1:be:4d:55:b3:ed:3b:be:b3:e5:4b:d9:3f:fe:dc:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:48:23:C7:6E:65:AC:E0:A5:54:25:2A:91:A0:A7:01:69:45:EF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b554d9e-abe5-33b3-bac3-c40a6878b038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:e3:31:ff:43:b0:a5:87:46:97:9c:6f:d3:87:f7:32:a3:
         42:ca:8e:fb:60:0c:4d:a0:99:06:3e:7c:21:e7:26:df:4a:ed:
         ea:4d:fc:66:eb:5e:7b:4c:09:7d:65:d0:fe:b7:2b:b7:b3:75:
         cc:88:1d:a0:9f:5d:08:34:14:24:b5:7a:54:7f:a8:f4:b8:e5:
         43:f0:2e:e3:21:03:cc:ed:b8:6b:db:c4:eb:a5:eb:d3:01:e8:
         1f:52:39:5d:3c:e0:4f:08:28:f4:aa:37:69:76:0f:0a:5b:bf:
         71:44:99:4c:3a:a7:5a:f4:de:fe:c8:0e:ce:cf:5f:dc:12:01:
         fa:84:93:fb:6a:63:8b:26:5f:ec:36:08:a2:8c:00:fb:c4:b0:
         e1:c7:d4:fb:eb:0d:72:06:a1:9c:34:68:a7:73:da:46:c2:f1:
         6e:9d:78:b7:3e:25:1a:68:a4:5c:33:09:59:8a:91:3d:6b:86:
         ff:26:9b:91:27:37:8c:92:37:2c:db:f6:91:b6:d1:81:96:c6:
         99:bb:bc:84:c6:8c:37:9e:58:ad:c0:9e:16:c4:0e:dd:a2:e9:
         65:48:c2:92:44:06:f9:3e:81:07:0d:16:38:38:fd:5f:33:01:
         a5:5c:bf:c9:f8:53:f8:94:35:23:a1:4f:8c:9b:8c:1f:f7:63:
         e8:40:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:00 2025 by rpki-client