Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b98735d9-7b8b-3e1b-a2f4-709c52d45938.roa
File:                     b98735d9-7b8b-3e1b-a2f4-709c52d45938.roa (raw, json)
Hash identifier:          MAXQQW1rtLsPLaVKbVqcChyl1c/9+n6cM7BRaDCASe8=
Subject key identifier:   15:02:6D:6D:4F:38:C1:12:60:CF:81:EA:85:57:4B:01:54:AB:37:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B01A84DCE4FFF3E68AE98A880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b98735d9-7b8b-3e1b-a2f4-709c52d45938.roa
Signing time:             Thu 28 Aug 2025 12:42:37 +0000
ROA not before:           Thu 28 Aug 2025 12:42:37 +0000
ROA not after:            Wed 26 Nov 2025 13:42:37 +0000
asID:                     396546
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:a8:4d:ce:4f:ff:3e:68:ae:98:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 12:42:37 2025 GMT
            Not After : Nov 26 13:42:37 2025 GMT
        Subject: CN=ec4b53d0-0aa0-45f0-836f-03691b7cadd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:6f:61:69:46:33:a6:cc:6f:b9:90:06:c7:
                    f8:87:8a:cc:dd:58:f6:d1:81:f1:8c:a4:08:89:aa:
                    b8:93:80:7c:84:5d:75:cc:d8:11:a3:15:96:d4:55:
                    a1:2a:e1:39:ff:c7:8f:d7:da:7f:19:cd:f4:bb:3c:
                    f2:87:6e:ba:f4:e7:ea:93:5a:7a:d2:10:b2:7a:51:
                    cc:e9:9f:e0:8e:7f:25:74:d4:c1:6e:e6:8b:33:90:
                    1e:9a:3f:a4:b9:e9:05:00:f9:cf:68:d9:4e:10:2a:
                    02:13:cc:09:92:ca:77:2c:96:70:ed:b8:a5:a1:23:
                    da:b3:98:b4:55:f6:cb:01:f6:c7:9c:a5:04:31:3a:
                    7c:de:34:00:7f:1c:67:1f:f9:ea:aa:de:68:1c:a6:
                    98:38:9f:48:b9:e4:1d:3d:26:f7:2d:f9:dc:c5:9e:
                    e6:e0:9b:d8:e0:2a:82:4f:1e:ce:5c:15:bc:fc:91:
                    77:e9:b7:a6:dd:22:ff:2e:7d:cf:3a:b8:4d:cb:f5:
                    e1:53:08:a7:95:1a:54:0f:80:36:ad:c2:65:17:17:
                    bd:c9:48:b3:26:d6:87:1b:8a:42:63:ac:5a:bd:a1:
                    b6:07:24:66:d3:00:4c:57:97:fd:d6:64:cf:a4:b5:
                    19:80:0b:28:b4:82:9a:35:77:f9:ec:7e:9d:de:9f:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:02:6D:6D:4F:38:C1:12:60:CF:81:EA:85:57:4B:01:54:AB:37:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b98735d9-7b8b-3e1b-a2f4-709c52d45938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ab:05:60:c9:13:2a:60:ea:2c:65:f2:b5:e9:eb:9e:78:7f:
         a5:2e:45:d1:d0:4f:f0:f1:ad:0c:10:10:6d:28:0c:9d:1a:17:
         80:3e:67:61:6d:eb:a5:7b:a0:a2:e3:b5:47:c0:2f:77:d7:1f:
         b8:6b:8b:be:95:94:2d:e8:48:97:52:78:72:f0:d2:61:fe:41:
         e9:65:c9:45:ee:ef:84:a3:30:83:90:27:4a:ac:59:15:8b:95:
         d4:a3:04:35:dc:2c:7b:df:66:38:e3:fa:e7:30:28:dc:c9:14:
         aa:03:47:a3:e8:4c:5f:e9:07:9e:3f:6a:90:ff:5f:3e:3f:52:
         91:33:02:0b:ad:86:f9:5c:0e:ae:8c:32:b2:dc:d6:8d:cb:0f:
         8b:7c:54:50:d2:45:c2:94:4a:2d:88:f7:98:20:74:ad:ac:b2:
         b2:60:38:b7:20:22:e5:85:19:1c:67:54:ce:41:8c:df:f9:aa:
         36:02:40:9b:48:39:5b:ee:a7:dc:96:54:1f:3f:41:2a:b8:75:
         75:fd:d0:5b:b9:1b:a7:0d:30:a2:6b:22:dd:19:93:30:b8:13:
         00:d7:44:4d:4f:b1:bd:46:16:8f:39:39:ea:0a:c7:af:f9:2d:
         b7:71:8c:86:7e:01:1c:19:b3:0c:cb:26:82:45:76:73:78:6a:
         cb:34:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:53 2025 by rpki-client