Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4a33281e-4962-3080-ab15-fc843e0b2776.roa
File:                     4a33281e-4962-3080-ab15-fc843e0b2776.roa (raw, json)
Hash identifier:          aUucZFSx2GQo1Mdw09Ei+rsK3IXCUesHJh/SlL56ZKM=
Subject key identifier:   95:65:CB:4A:F5:E7:52:2E:AB:37:3B:16:54:B7:08:AF:85:97:BA:12
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584A761B601C8A7C16E39E5F1800
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4a33281e-4962-3080-ab15-fc843e0b2776.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        199.88.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:60:1c:8a:7c:16:e3:9e:5f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=d603bd95-ff4f-4d5e-9500-08009cda498f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:ea:b6:57:cb:19:f1:61:62:c9:e3:fc:d0:
                    d4:3b:a0:53:b6:5e:3a:4f:ff:cd:67:57:65:4f:9f:
                    28:a3:53:70:08:97:c1:b1:28:61:fa:4b:cc:5c:1a:
                    47:c5:32:39:d0:bc:36:57:0b:4f:f3:48:0f:a9:32:
                    b2:fc:f0:44:0f:b6:31:6a:ff:04:66:2a:c9:69:aa:
                    f8:64:40:38:9f:63:04:c6:67:97:99:58:1c:88:4c:
                    ed:11:83:d4:b6:d5:a4:88:6f:55:53:57:56:fb:0b:
                    53:3c:34:b6:c5:e2:bd:4c:38:5d:9f:e5:79:8d:0f:
                    9d:94:5e:ed:03:fe:ea:39:42:fb:d9:ef:de:a9:d4:
                    55:74:c6:7d:68:f2:6f:62:46:f5:9a:8b:cc:dd:c8:
                    ab:a3:f1:c3:53:70:6a:78:d7:51:bc:4e:8e:92:07:
                    59:cb:22:75:9d:52:ea:2d:aa:75:15:fd:1d:d2:a4:
                    f4:9d:c0:12:89:1a:51:7e:ac:b1:1d:90:f4:9a:c9:
                    d4:2a:4b:eb:dd:ed:7c:44:cb:a6:d0:70:5f:3a:81:
                    f8:fd:62:8b:4a:a6:c3:cd:12:af:08:d3:a2:51:6d:
                    ee:19:7e:35:50:a2:18:5a:b1:fe:72:d6:65:6d:e0:
                    3f:4c:38:fb:32:25:b3:2b:bc:da:e1:c2:da:2a:64:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:CB:4A:F5:E7:52:2E:AB:37:3B:16:54:B7:08:AF:85:97:BA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4a33281e-4962-3080-ab15-fc843e0b2776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:ea:ef:4a:af:c6:77:d0:f3:23:1a:39:10:80:3a:19:a8:
         96:3c:90:95:23:9c:d1:1c:ac:b9:f6:8a:f9:86:42:94:38:d8:
         35:fb:36:a2:38:8d:43:fb:21:43:0a:e2:26:61:15:36:35:ed:
         63:08:41:98:c3:44:98:4e:a6:b3:db:31:43:73:de:95:05:83:
         80:5e:56:e8:42:b3:6f:b9:71:93:33:3e:c8:81:ef:ab:12:e6:
         7e:32:7d:9a:8a:b7:f4:6c:9c:fb:44:95:5f:00:f1:47:eb:f7:
         bc:5a:fc:5f:3d:d8:c1:7e:cb:7c:48:e9:a9:d1:4c:76:a7:3b:
         21:96:94:09:f2:74:a9:2f:e5:83:42:5f:07:af:c7:92:11:41:
         5c:ca:a6:ab:55:da:9f:cb:71:3b:71:2a:e9:bc:9d:cb:7d:8e:
         d4:71:57:5a:00:d9:9d:57:7f:3d:2c:95:7d:1f:b9:5e:9b:b8:
         9b:a0:ac:ae:ad:8c:5a:fd:8c:ab:8b:c7:0d:a3:4d:72:31:9a:
         3d:75:4b:3e:ba:99:3b:58:7e:61:74:ed:45:ae:0d:57:f1:fe:
         ed:6b:30:b9:b0:02:27:b1:3d:c9:63:08:7c:4a:a2:47:e3:e5:
         7d:78:79:76:ce:f2:bc:e3:c8:6d:58:8c:60:2b:7d:9d:26:5c:
         f7:3b:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:38:43 2025 by rpki-client