Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/290552b4-70b8-3302-8f58-07d235d199a9.roa
File:                     290552b4-70b8-3302-8f58-07d235d199a9.roa (raw, json)
Hash identifier:          CIIPmk+bbUJ+47vheF2V4PHX5Y59TkAjEyyZE4rQdXw=
Subject key identifier:   43:5C:89:59:33:B4:57:4E:16:66:9B:45:A4:BE:0C:15:FF:3A:E0:95
Certificate issuer:       /CN=93cbb231-50f0-43e8-b3c8-5d5831adb28a
Certificate serial:       010D0C9F4328584AD3A0F5E040540B9399F86000
Authority key identifier: 26:3D:54:DD:96:3C:D3:D7:D4:00:2A:9E:2A:AF:2A:E6:D8:94:68:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/290552b4-70b8-3302-8f58-07d235d199a9.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        167.94.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f5:e0:40:54:0b:93:99:f8:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93cbb231-50f0-43e8-b3c8-5d5831adb28a
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=309e6907-e637-428f-bfe5-7f778810c531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:16:3c:26:2d:20:4c:a9:1c:86:35:b5:56:
                    c0:a1:54:f7:3a:b3:76:4c:18:ce:c2:81:a6:c9:a6:
                    41:f2:5c:65:1b:cc:62:fb:94:47:58:b8:93:db:78:
                    91:36:13:a1:b8:b3:ee:70:64:00:34:8f:4d:1e:fb:
                    51:89:de:27:e4:b5:1c:5e:65:93:98:58:10:4a:80:
                    cc:1b:55:3e:e6:ec:93:d9:ec:1d:bf:41:cd:b8:5f:
                    ae:ea:09:89:7a:87:8e:4c:14:e7:2d:e5:bb:d4:31:
                    a3:4b:5a:4e:91:10:bf:f7:f9:74:3f:43:1d:13:ca:
                    67:e6:4c:fc:47:48:e5:7e:c1:3c:cb:cb:81:1f:9f:
                    21:13:25:25:2a:c7:59:e5:c4:48:d0:44:9f:87:7f:
                    33:ff:55:c6:18:c9:00:40:b4:00:28:6f:df:84:42:
                    e5:2e:70:59:fa:26:3d:2f:d0:33:aa:44:15:a6:4b:
                    d1:b9:e2:de:32:a4:17:3e:a2:5a:64:51:44:81:fd:
                    ca:24:83:43:5b:87:cd:01:03:5d:59:68:88:85:c3:
                    74:69:26:31:4d:ae:02:61:85:c1:0e:a5:da:2e:48:
                    51:3a:1b:49:54:6c:9a:12:26:3c:af:5b:a5:81:b8:
                    58:64:79:ae:66:56:13:df:4b:dc:a5:da:de:d3:ba:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:89:59:33:B4:57:4E:16:66:9B:45:A4:BE:0C:15:FF:3A:E0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/290552b4-70b8-3302-8f58-07d235d199a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.crl

            X509v3 Authority Key Identifier:
                keyid:26:3D:54:DD:96:3C:D3:D7:D4:00:2A:9E:2A:AF:2A:E6:D8:94:68:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:1d:84:d5:03:08:68:0a:3f:36:bc:19:45:0d:bc:46:88:ad:
         e4:fd:b1:19:a9:34:04:79:5b:07:e8:01:8d:21:a0:18:f8:fc:
         8e:72:72:63:dd:41:01:8d:e6:50:64:79:3b:6b:92:38:38:b2:
         81:1d:21:17:e6:7c:01:e7:92:6c:30:5c:03:b9:07:1b:18:53:
         75:99:64:23:14:91:25:d9:fb:81:1f:95:eb:95:81:f6:99:d0:
         96:8f:c8:ae:60:22:51:2c:98:23:e5:15:7e:12:11:02:21:73:
         c8:58:f9:22:45:54:a4:cc:66:cf:be:76:f7:0e:d8:5e:1d:30:
         a6:7f:80:f4:18:a6:5d:43:3e:0d:95:cd:6e:ee:78:6a:4b:da:
         db:a2:55:df:51:25:87:7b:e0:3f:cb:bd:b5:27:48:cd:0f:ae:
         d8:15:79:ca:99:6f:27:2d:68:e7:0a:e2:13:9c:7c:5d:98:b0:
         ac:51:8e:00:bc:f4:bf:07:c9:57:ec:b6:20:da:a8:c0:27:b0:
         93:bd:8a:0b:65:e7:34:09:77:16:0c:e7:9f:37:cd:69:bd:5a:
         d4:16:af:d9:1b:75:3d:50:ea:b2:26:28:d8:2b:f8:8d:54:b0:
         62:e7:5f:e4:40:77:3a:01:f6:92:bb:77:12:f0:68:96:5a:e7:
         72:ef:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:11 2025 by rpki-client