Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4523150-cbc4-3588-83ae-f5e925da6653.roa
File:                     f4523150-cbc4-3588-83ae-f5e925da6653.roa (raw, json)
Hash identifier:          q4/h/R+f+X2JL9TX8C1IhrWRzRJw3mzaZnri2UzasLM=
Subject key identifier:   AD:CE:A7:92:00:FA:46:9F:FE:94:46:E4:69:BD:F6:A3:99:FE:69:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B01A84E20B682DCBE8D93F700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4523150-cbc4-3588-83ae-f5e925da6653.roa
Signing time:             Thu 28 Aug 2025 12:42:37 +0000
ROA not before:           Thu 28 Aug 2025 12:42:37 +0000
ROA not after:            Wed 26 Nov 2025 13:42:37 +0000
asID:                     396582
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:a8:4e:20:b6:82:dc:be:8d:93:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 12:42:37 2025 GMT
            Not After : Nov 26 13:42:37 2025 GMT
        Subject: CN=f963bd9b-bcfb-4d51-8588-89f46217192c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:95:81:1d:d7:3e:01:c9:b3:72:4e:58:05:
                    62:9d:0f:8a:15:85:ee:26:c6:22:22:c1:93:7d:76:
                    56:bd:59:c2:74:c9:7a:23:7b:1a:ff:73:03:3f:4b:
                    d1:09:76:fb:07:0b:56:20:22:a0:3c:fa:4a:59:e4:
                    9e:85:67:e5:df:4b:aa:f1:f1:6f:27:c5:91:2d:11:
                    f8:3d:eb:7b:73:da:da:09:3b:7b:c4:6a:a4:36:76:
                    fb:cd:48:c1:40:5c:75:54:4d:02:82:42:62:ea:cd:
                    8b:15:58:69:d4:c3:8d:6e:27:94:54:bc:54:fe:27:
                    7e:c1:9f:70:e2:12:8d:ab:ea:25:0a:83:6e:1e:ad:
                    ee:52:15:26:59:81:ca:5f:87:94:8c:0f:87:61:de:
                    d4:c4:0b:fa:9d:a4:43:6a:e8:03:5a:7c:70:47:6a:
                    05:16:9e:f1:72:ba:d6:19:3b:37:da:68:29:e7:f2:
                    44:0f:33:dc:8c:63:c5:23:cc:41:4a:c4:c3:2f:83:
                    c5:b4:26:85:a0:30:92:56:58:dc:5a:5f:1b:0b:e7:
                    59:d5:06:f6:4b:6d:cf:c5:44:a8:77:12:d5:3d:43:
                    74:2d:b8:85:fb:b4:b8:00:41:03:a1:96:a5:75:4b:
                    53:31:00:55:2f:d0:74:f6:80:db:19:65:4c:2d:2f:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:A7:92:00:FA:46:9F:FE:94:46:E4:69:BD:F6:A3:99:FE:69:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4523150-cbc4-3588-83ae-f5e925da6653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:79:c3:99:0a:ed:73:44:58:63:bb:a6:07:8c:c4:f3:e4:
         ef:7b:f9:b7:e4:ff:8b:1d:05:47:99:61:03:a3:06:8b:8b:fa:
         c9:18:63:3c:8c:b3:ba:d2:0d:d1:38:ef:49:df:39:9f:52:e2:
         6c:69:cc:1d:34:e2:be:d4:69:2b:18:2a:e0:ac:dc:5d:ac:eb:
         8c:3b:3d:ec:7d:f5:10:62:04:28:69:71:9b:ea:4a:35:ed:68:
         8e:c6:0e:f5:c6:75:5a:8f:f1:3c:84:13:83:ef:1a:bf:97:b0:
         a8:65:56:db:76:23:c4:ac:10:fb:e4:e2:0f:13:fa:2d:47:18:
         84:a3:a5:ac:cf:15:6b:4f:d2:2e:29:31:9c:6a:c4:fa:3b:8e:
         4d:08:81:ce:e1:b5:0c:5e:b7:d3:c0:7a:49:c6:cf:10:9a:da:
         bd:a4:4b:dc:e8:61:8d:51:0c:0a:68:a0:42:96:5f:a6:32:79:
         de:75:be:9b:0d:a0:22:c1:bf:76:68:86:a7:dd:52:a6:3f:48:
         d5:ad:01:71:ac:5c:80:24:0b:4d:80:f2:16:96:63:be:c3:0d:
         66:9c:08:18:09:b7:1d:d3:29:96:4c:e0:54:55:e3:b7:27:8e:
         bd:c9:46:2f:56:53:df:ac:8c:b9:68:f2:8c:df:e5:35:5f:18:
         54:68:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:48 2025 by rpki-client