Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6dad07a-8547-32f0-9263-d30a4834a4e1.roa
File:                     d6dad07a-8547-32f0-9263-d30a4834a4e1.roa (raw, json)
Hash identifier:          5KkKtqv0zvcnmQLqOjeDRjbMIKBw/NOT+UhObkn1kM0=
Subject key identifier:   45:57:A6:C8:56:E1:ED:ED:F6:2D:3E:F6:25:3F:3F:A5:7B:C4:FB:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCDC955BBE07087F8FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6dad07a-8547-32f0-9263-d30a4834a4e1.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     397203
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:cd:c9:55:bb:e0:70:87:f8:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=943ba929-4fc7-4263-bfaf-d99824077f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:ce:d3:1b:0e:b1:2c:41:00:26:0b:5e:76:
                    8a:fd:3f:b1:68:50:7e:9a:4e:e3:af:f8:4e:74:64:
                    d3:00:b9:1e:00:fd:65:5e:6f:c3:31:97:b5:7d:eb:
                    d3:fc:b5:91:d8:87:5c:8f:9b:6d:36:34:ba:d2:79:
                    97:c8:e4:a5:60:56:60:e9:c0:7a:5f:23:1d:9e:05:
                    50:3e:96:42:4a:dc:88:8e:f1:f2:05:a9:5f:f7:e6:
                    57:21:aa:f7:06:29:ec:29:7b:cf:6f:fd:1c:35:7b:
                    55:bd:dd:8f:63:38:83:61:f1:f4:1b:1f:bf:7d:b7:
                    6c:71:75:fa:c6:01:38:4d:0b:26:1e:63:26:5b:f6:
                    4b:18:62:3c:99:e4:d1:cf:1c:95:05:81:40:73:49:
                    29:9a:57:1b:53:e4:5c:26:04:02:7c:f8:8e:25:45:
                    99:8f:0f:55:1f:80:f3:2e:93:f2:5d:e9:2a:f8:45:
                    80:9f:1c:17:d5:da:da:41:7b:f6:03:32:7a:5f:59:
                    e9:6f:80:81:db:f5:aa:56:dc:65:f6:dd:23:7f:a0:
                    2a:dd:17:6c:3d:26:64:6a:1c:1d:45:8a:33:bf:1e:
                    50:db:cb:8a:2a:ce:65:51:71:bf:78:70:3a:79:e0:
                    98:65:ef:05:b3:21:c5:f6:68:2d:91:6b:2f:43:16:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:57:A6:C8:56:E1:ED:ED:F6:2D:3E:F6:25:3F:3F:A5:7B:C4:FB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6dad07a-8547-32f0-9263-d30a4834a4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:12:cb:2c:f9:eb:11:1d:bd:ba:01:8e:4a:33:92:bb:f3:
         de:3e:01:f5:b4:40:57:a2:4b:39:6e:ba:3e:54:06:8d:11:c9:
         5f:26:35:a2:3f:3b:ce:ef:76:62:cb:aa:c4:f3:49:d9:b9:bd:
         78:9b:0d:17:7b:72:64:5b:76:9c:9a:f4:1e:15:bc:bb:db:5e:
         21:f0:6e:d0:ff:b3:be:2d:e8:f5:8f:22:f9:e7:92:07:4b:91:
         91:ec:6e:72:14:2b:68:50:ae:5b:f6:68:9c:ac:d5:ad:bb:95:
         36:f3:b7:53:c9:81:a1:c0:fc:d5:d5:39:62:a8:40:ad:e6:65:
         98:47:ad:4f:c4:ee:b2:f8:47:50:06:ea:98:81:6f:ab:cc:d8:
         4e:a7:66:d3:f3:3f:5a:ca:12:ca:14:f1:37:ce:24:f9:00:ed:
         28:aa:91:17:a9:4b:fe:12:f7:44:fb:0e:77:1b:9e:8b:5b:e6:
         30:8f:6f:b4:0a:b0:21:f3:a6:df:26:da:4d:10:96:c0:e0:ba:
         bf:26:da:49:e6:6c:be:c6:c9:20:22:84:bb:2f:1a:73:6c:d7:
         e4:ee:36:f6:fa:84:5b:24:e7:f1:f3:70:5f:56:9e:3c:5b:48:
         01:3f:18:67:66:28:49:6c:d4:b5:ca:06:57:0d:2d:f9:12:21:
         ce:d4:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:54:29 2025 by rpki-client