Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa
File:                     121123d8-f74f-33d5-8776-bedc2864efb9.roa (raw, json)
Hash identifier:          OV/FrDfGKhgefCLoc36Wi7A/5AdMBLLV9tR+ssBa1XY=
Subject key identifier:   5D:89:ED:CB:3D:4B:36:68:4F:96:08:51:3E:52:69:19:E5:F8:69:76
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584A6C55DB6E5A9DC867B47598C0
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     10497
IP address blocks:        192.86.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:db:6e:5a:9d:c8:67:b4:75:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=45fea284-6d4e-4d09-ab70-8401b6dc0ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:68:0d:cd:e4:29:3a:04:f2:d1:8f:18:9b:
                    98:fa:1f:bc:6e:72:fa:41:d8:9f:71:aa:2e:6d:1d:
                    40:2b:98:87:59:9a:9d:9a:8f:e0:54:2e:52:29:d9:
                    a3:ef:c9:99:2f:f7:66:3c:bf:08:e7:2c:7c:ee:dc:
                    a1:d0:73:24:ac:a4:7e:12:5e:04:c1:60:4e:df:ac:
                    b6:54:97:38:36:b7:0e:b5:fe:77:ce:73:44:e6:35:
                    e2:c4:e1:5e:db:9f:d9:e2:5d:67:ed:16:a5:f5:3f:
                    90:d7:58:c8:22:29:1b:ce:a8:e7:93:1e:90:2c:a1:
                    97:67:66:35:b0:16:e4:89:53:a6:5c:e1:c8:9d:b2:
                    cb:d0:d7:b6:a9:45:e6:b7:01:4d:4d:1e:ab:1b:4a:
                    81:b5:ab:14:94:9d:ac:ee:1a:80:68:b4:aa:7c:36:
                    55:12:87:4f:34:64:c4:c8:ba:c1:b4:d6:81:24:b5:
                    04:fc:32:40:ab:11:f3:d7:7f:94:0e:7e:f5:0c:55:
                    6b:60:8e:f0:22:c6:5b:72:16:04:47:40:29:c6:8a:
                    a3:b2:5c:af:d0:db:03:c4:a0:ad:0b:9a:de:f0:d2:
                    45:d4:cb:73:37:7a:af:7c:ad:5f:e1:71:dc:bf:64:
                    49:3a:51:02:1a:20:04:54:bb:18:e2:4b:db:7a:57:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:ED:CB:3D:4B:36:68:4F:96:08:51:3E:52:69:19:E5:F8:69:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:8c:d2:46:17:00:24:b9:51:04:3a:12:d2:1d:72:d6:59:
         c1:91:fb:9e:21:11:dc:22:e0:d8:29:da:cf:4a:02:63:b1:fd:
         e1:ae:91:1f:e3:bf:df:e0:0e:97:ca:1f:b8:d9:e2:81:f2:86:
         a2:27:5d:63:75:b6:b2:7d:97:10:28:4a:7a:94:62:c3:cf:21:
         fe:78:ff:c7:66:8b:82:1b:1a:c0:b6:74:22:b5:0e:4a:7f:c0:
         ca:eb:61:40:ce:60:ea:35:7f:ae:1a:b6:d1:0f:e8:ed:26:01:
         fd:b5:8d:de:3e:e7:9c:47:4d:70:db:88:fc:c1:82:ca:66:db:
         1e:52:08:12:a2:8e:7a:da:42:66:bf:31:2d:89:4e:81:18:e1:
         6a:ed:e6:33:0b:ec:bd:3b:40:fb:35:1d:29:c5:a1:24:d5:7e:
         0e:21:8e:b4:3a:90:0b:dd:2f:ea:58:16:97:bc:c3:8a:d0:47:
         5d:1d:87:cd:59:d0:64:5f:f8:11:a1:b1:ff:c8:be:f8:1b:61:
         68:7e:16:aa:65:9e:52:89:28:38:b4:53:61:fa:a2:76:e8:5f:
         62:fe:7f:68:35:2e:06:66:67:90:f9:4d:d6:1a:4c:89:27:32:
         b8:76:48:44:ac:dc:cc:8b:61:70:93:a6:5f:e8:aa:d5:cf:3d:
         fb:1d:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 21:44:38 2025 by rpki-client