Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/e148f9ac-08aa-316c-921e-9f1dddf52339.roa
File:                     e148f9ac-08aa-316c-921e-9f1dddf52339.roa (raw, json)
Hash identifier:          oNFSXu9aNLQ71V0nKcRTnPT+Xj+3/yWOSnAkCO4dK/Q=
Subject key identifier:   76:44:59:A6:57:A0:0B:65:0E:B6:81:05:4F:DD:87:30:03:B7:83:5C
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584AE19692024010D7399875DA00
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/e148f9ac-08aa-316c-921e-9f1dddf52339.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     210
IP address blocks:        199.104.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:92:02:40:10:d7:39:98:75:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=87df3faa-2906-414f-934d-60d8c3dd8f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:2f:b1:4f:bd:ca:18:12:97:c8:f0:29:13:
                    6a:03:4c:47:ad:fb:0d:eb:e6:2c:b0:ba:41:f8:f7:
                    86:5b:06:ba:b0:27:e3:58:e0:94:78:6c:22:ad:c7:
                    50:9f:1c:63:19:05:69:4f:b6:8d:36:65:8c:be:7e:
                    86:db:7d:6e:81:0f:15:bb:90:f5:da:f6:b9:f8:45:
                    ca:3c:79:63:96:12:e2:0e:c9:e2:9d:31:e7:33:1d:
                    a9:ea:a3:c5:1a:fc:ad:64:62:df:82:84:19:c4:5a:
                    7b:b2:d3:db:14:d7:6a:89:89:ae:9f:8d:2e:5d:3e:
                    10:0d:25:80:51:bf:ee:af:dc:d9:5b:b6:c1:5c:5c:
                    d9:24:38:29:6d:29:ef:1e:0e:49:6b:35:1c:1a:14:
                    66:c6:4d:30:91:14:ba:22:71:89:7c:80:71:2d:ea:
                    75:b9:60:61:58:e8:97:be:84:05:7e:f2:2c:82:f6:
                    60:4f:16:3f:3c:4e:43:4d:ea:a7:d3:48:e6:f1:cb:
                    9b:eb:27:e0:61:1e:65:94:29:95:ef:62:43:8d:05:
                    8e:d3:47:3b:b3:1e:e1:c4:be:41:5d:6b:40:d0:cb:
                    b1:06:f9:87:c2:eb:03:10:df:1a:aa:48:0c:95:58:
                    96:fd:94:d7:3b:e4:12:cf:d1:fa:62:e0:82:3c:79:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:59:A6:57:A0:0B:65:0E:B6:81:05:4F:DD:87:30:03:B7:83:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/e148f9ac-08aa-316c-921e-9f1dddf52339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.104.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:50:5d:ec:14:64:ca:b3:58:ae:38:fd:ff:8d:94:2f:c7:
         f3:2b:b4:02:fe:6f:fb:73:a5:0c:38:01:db:29:58:da:93:b7:
         e4:de:07:ae:4a:22:aa:0d:e2:55:43:22:c8:ff:39:e5:37:ca:
         e6:b0:9f:c7:2c:05:29:b9:96:49:81:67:8e:7c:b4:d0:66:c1:
         1f:f0:31:b9:e4:e8:f4:06:28:f3:e9:14:ff:86:1e:45:90:fb:
         11:ef:52:b9:3f:85:b3:85:5d:bf:1e:98:71:62:b4:8b:5c:e0:
         45:f7:23:c9:d1:17:5a:56:7b:ff:94:06:29:3e:e7:6d:4e:e2:
         46:4c:99:2f:6e:7a:25:66:a7:99:13:60:62:a0:1d:a8:80:97:
         a4:75:36:0c:23:ed:52:7a:76:7f:01:25:68:94:7b:7d:6f:1f:
         a5:8d:9a:54:9a:a4:2b:62:37:b5:a7:7d:e0:b7:23:52:d6:0b:
         60:a4:30:4c:08:f1:ce:68:67:ea:c5:79:f2:19:f6:9e:d2:5a:
         c4:0f:80:a3:1d:83:a7:33:50:5a:f8:1c:6e:7d:f2:77:92:55:
         3d:43:cb:f3:44:e2:72:c1:2d:30:27:c8:d8:4b:52:f8:c5:c7:
         eb:5a:e9:4e:0c:2b:40:2d:b5:4a:24:64:d9:fe:a3:a8:71:61:
         09:97:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 12:52:26 2025 by rpki-client