Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/f247a697-5581-3f8e-84fb-f13e92b1109c.roa
File:                     f247a697-5581-3f8e-84fb-f13e92b1109c.roa (raw, json)
Hash identifier:          8KOLY5ZCqMbtXA/qSG5UVw5lbRZ+prc1vpIatCEpLCI=
Subject key identifier:   81:D2:E1:C7:96:E9:63:2B:CE:B5:D2:A4:0D:CF:69:B3:B5:A8:12:55
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584AFF2CB2EA9F90D413ADDC1400
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/f247a697-5581-3f8e-84fb-f13e92b1109c.roa
Signing time:             Wed 27 Aug 2025 15:21:57 +0000
ROA not before:           Wed 27 Aug 2025 15:21:57 +0000
ROA not after:            Tue 25 Nov 2025 16:21:57 +0000
asID:                     11588
IP address blocks:        192.222.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:2c:b2:ea:9f:90:d4:13:ad:dc:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Aug 27 15:21:57 2025 GMT
            Not After : Nov 25 16:21:57 2025 GMT
        Subject: CN=43e26d2e-6894-4e8f-aaa1-1b4d89b4d40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:1c:33:96:59:4f:c7:de:17:c0:7f:40:46:
                    17:dd:8a:df:09:fb:df:95:5d:c6:9e:d2:42:24:a0:
                    d2:de:77:62:8f:5d:71:b9:71:eb:8c:b3:0f:d0:aa:
                    bd:39:90:3d:e0:42:0a:c4:4d:40:3c:4e:c0:fa:27:
                    68:e0:46:d8:cd:56:dc:27:3a:84:62:5e:68:67:e1:
                    64:b2:a9:d5:d3:e3:10:72:ef:52:63:fe:a4:a2:00:
                    b0:52:f2:b6:05:6a:86:9c:83:b0:ef:ac:bb:15:37:
                    52:93:78:ca:93:60:ae:9c:75:79:66:5e:91:a3:62:
                    5e:f0:c5:4f:b0:3c:9e:17:c0:74:a5:b8:b8:7e:9f:
                    23:7c:65:b6:2f:cc:b0:5a:ba:58:63:81:b1:be:45:
                    9c:48:63:58:15:0b:a9:b5:e7:d8:1e:74:f8:bb:de:
                    27:79:12:c3:da:87:8f:6f:8d:51:90:04:cd:b4:bb:
                    c0:65:2e:82:58:b3:71:56:ee:5e:08:c4:9a:be:12:
                    54:20:a3:d2:2c:22:1f:86:17:ff:fb:8c:dc:fc:3c:
                    32:b3:4d:9c:e5:1e:b3:25:f6:b7:e3:c6:41:98:d2:
                    34:c4:19:ee:dd:ee:f9:7b:dd:d8:5e:61:9c:3e:d0:
                    6f:85:63:90:7e:28:a4:f4:24:c5:9c:c7:32:01:e3:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D2:E1:C7:96:E9:63:2B:CE:B5:D2:A4:0D:CF:69:B3:B5:A8:12:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/f247a697-5581-3f8e-84fb-f13e92b1109c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.222.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:79:2f:62:2c:cc:76:de:87:52:74:9b:62:6d:7e:87:a2:5b:
         04:ea:66:53:51:54:db:f2:cb:e2:99:cd:f5:d6:9b:50:ad:37:
         81:31:da:96:23:de:ee:43:c4:10:2d:63:96:3d:fc:9d:e5:cd:
         e1:cf:a6:f5:a1:d9:6c:ce:f1:dc:a2:09:a2:66:67:3a:09:79:
         b8:09:37:25:6d:2b:9e:1e:98:4a:e0:f9:56:2e:94:44:22:fb:
         83:c5:47:06:08:2c:c2:79:16:05:2f:94:39:23:25:ff:69:46:
         cb:62:c1:c7:2e:2d:14:e9:eb:2e:2e:f8:1b:6a:f9:59:77:d3:
         20:a6:e5:02:04:eb:2f:71:40:92:39:b8:12:63:4b:4f:f0:48:
         be:8f:22:76:9a:10:60:b7:79:31:14:51:65:d2:ca:c3:62:54:
         3d:bc:9d:a1:6d:11:41:92:c9:c8:e9:e6:a5:8b:94:84:b0:be:
         55:bb:17:99:69:15:e2:92:38:02:f2:92:99:a7:df:41:03:4e:
         0c:d4:00:3b:93:4a:38:2f:c8:29:eb:f3:35:9d:f8:43:a6:9e:
         d0:cc:cf:67:1e:a1:2e:e2:5e:5c:92:3e:ee:93:10:c3:fc:85:
         7e:13:9b:73:f1:61:d3:83:c1:2d:80:60:26:ce:30:b0:1d:33:
         22:22:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:19:08 2025 by rpki-client