Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ba3516-fe76-3e1f-a033-6822ef545af9.roa
File:                     b3ba3516-fe76-3e1f-a033-6822ef545af9.roa (raw, json)
Hash identifier:          iqT4lV07GeLWM5QK3oaMS/clXmJdJJ2EgdL68a83IVA=
Subject key identifier:   E6:EB:84:9F:2A:B9:EF:70:24:3A:26:87:F6:1B:0F:34:0C:D9:E3:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCA98E7EF118FC7ED0B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ba3516-fe76-3e1f-a033-6822ef545af9.roa
Signing time:             Tue 26 Aug 2025 12:32:15 +0000
ROA not before:           Tue 26 Aug 2025 12:32:15 +0000
ROA not after:            Mon 24 Nov 2025 13:32:15 +0000
asID:                     396596
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:ca:98:e7:ef:11:8f:c7:ed:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:15 2025 GMT
            Not After : Nov 24 13:32:15 2025 GMT
        Subject: CN=8bac311c-04e0-43f2-aa8e-7b4f060920a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:dd:d0:f1:1f:d9:ed:6d:b5:af:d3:31:9a:
                    90:7a:28:c2:79:48:66:a7:eb:0a:16:04:30:fe:72:
                    5d:b6:df:33:7c:a7:b8:fc:7b:bb:42:be:88:12:31:
                    15:80:12:10:75:07:6c:40:2d:53:a8:ef:97:d8:86:
                    30:65:dc:14:90:5e:b7:fd:7d:f8:3c:91:fd:50:d4:
                    1c:8a:83:1d:94:99:07:1d:ca:cf:79:7c:43:10:00:
                    67:17:d4:be:86:a0:b6:43:5b:cb:ab:89:71:12:1d:
                    77:fd:40:ed:5c:66:ef:f9:70:74:67:10:23:ff:b2:
                    3c:e4:77:13:8b:19:0e:92:f2:d9:01:cb:fe:0b:26:
                    03:83:5a:48:17:6c:a7:ee:4e:eb:27:63:4d:82:3e:
                    81:cc:51:1e:35:ac:25:43:b2:87:34:11:e5:2d:da:
                    38:8b:1f:2d:19:bc:2b:4a:6b:30:d8:14:06:ff:bb:
                    17:d4:56:17:09:ef:c1:3c:3d:b5:83:ac:e1:40:b6:
                    fa:a7:91:14:b2:34:a5:02:47:bc:bf:b9:98:a7:a1:
                    17:ca:89:1d:9d:38:53:59:79:a2:82:2c:f0:5a:d6:
                    03:2f:2d:f6:bd:eb:3f:16:71:9c:11:f5:dc:ef:82:
                    ed:a6:a3:22:3a:39:bc:95:66:0f:0b:ae:c3:e8:bf:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EB:84:9F:2A:B9:EF:70:24:3A:26:87:F6:1B:0F:34:0C:D9:E3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ba3516-fe76-3e1f-a033-6822ef545af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:44:6e:2b:6e:bd:58:4d:e7:8f:fe:8c:c3:55:15:b3:ac:93:
         0b:ee:26:83:fe:ff:68:ff:15:18:5a:9b:6b:ff:5e:22:b7:08:
         58:97:f3:50:97:11:85:a4:99:c6:ab:5e:c0:59:bf:c5:2b:2f:
         2b:fc:2e:41:0f:a5:19:65:e9:6a:61:0d:50:18:11:1d:0a:ef:
         51:de:7b:ee:09:8e:97:40:db:d1:d0:a6:1c:a0:d5:7f:25:ad:
         dd:98:34:3b:93:bc:2c:c4:48:25:0e:d9:c9:d0:d1:ff:10:03:
         bf:e0:e8:11:48:af:8c:cf:49:26:93:5b:52:b4:0f:05:f0:8c:
         da:0d:76:c4:3f:07:2a:ef:37:2c:d7:19:60:d7:19:4c:68:3f:
         6e:3b:d1:f2:d6:a1:6c:91:02:7a:ae:f0:cf:20:22:28:85:e1:
         f6:6a:a4:b8:51:25:19:33:f6:62:cf:a3:cd:c5:46:70:48:9f:
         e1:05:fd:1f:6e:04:8b:a8:78:7f:79:6d:fd:a0:c3:83:16:47:
         a1:cc:1b:10:4c:1c:f4:f7:fe:e7:9f:db:3f:9a:ad:19:fd:6b:
         6a:10:b1:f0:ad:d5:df:99:34:46:49:ca:2f:e3:20:13:ff:9b:
         bc:b7:ef:67:58:a3:ad:5b:2c:8b:6d:32:d9:06:6a:22:2e:d1:
         91:45:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:53:21 2025 by rpki-client