Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/672938bd-d84a-307d-91e2-95ea0b8fcaa9.roa
File:                     672938bd-d84a-307d-91e2-95ea0b8fcaa9.roa (raw, json)
Hash identifier:          ZMCseSSbIs1ENaH7drPskDb1cqDdVtAg7mBYDFbeAGE=
Subject key identifier:   25:47:79:F1:B9:89:6C:E6:A0:D1:CE:A3:FE:0A:76:0A:F3:88:9B:9E
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F4328584B1035D35D3FDD7BE2496FE640
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/672938bd-d84a-307d-91e2-95ea0b8fcaa9.roa
Signing time:             Tue 02 Sep 2025 17:49:05 +0000
ROA not before:           Tue 02 Sep 2025 17:49:05 +0000
ROA not after:            Mon 01 Dec 2025 18:49:05 +0000
asID:                     401936
IP address blocks:        192.100.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:35:d3:5d:3f:dd:7b:e2:49:6f:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Sep  2 17:49:05 2025 GMT
            Not After : Dec  1 18:49:05 2025 GMT
        Subject: CN=741bb9dc-664c-4212-83b1-10c12e1b9c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:ee:25:f3:13:9a:6f:01:02:0f:b5:bb:7a:
                    30:e9:0a:2d:b8:98:bc:2a:ab:26:97:45:f6:f9:5e:
                    d7:e0:82:9f:75:70:e5:3e:8e:25:91:59:e7:4d:ba:
                    3b:39:b1:39:f5:11:45:0e:c5:bf:32:3a:1f:f3:fb:
                    86:dd:0c:2a:29:51:ac:05:73:c3:67:ab:b5:7d:06:
                    bf:70:7b:fe:9a:9c:f5:f2:c2:50:85:02:20:45:1e:
                    8c:25:38:d6:08:17:16:36:01:31:d9:f0:9e:6d:a6:
                    ef:6d:6b:b6:dc:a8:09:62:9d:b5:6c:9a:31:d1:3d:
                    7c:de:eb:07:ef:56:02:53:9b:eb:8e:ce:7b:b1:28:
                    4c:31:1d:17:88:3a:41:c5:4c:cf:42:71:21:d0:bd:
                    2b:09:82:07:6f:7e:8d:b7:3b:c7:2e:49:e6:34:88:
                    6e:02:b8:ae:ab:6f:c0:c2:a0:a9:05:c9:a0:69:bd:
                    f2:ce:76:28:4b:9f:be:19:68:9b:c0:a4:9c:dc:91:
                    e6:26:ce:55:d6:bb:7e:1d:17:8b:33:ca:b1:d7:91:
                    fb:87:f7:b2:ee:9e:41:dd:69:0b:8a:96:bd:86:16:
                    b1:9c:ca:e2:5a:d7:76:f4:9a:70:f2:d4:03:f2:ba:
                    c5:25:01:8d:40:9f:a8:53:7f:82:f1:a0:d7:1e:36:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:47:79:F1:B9:89:6C:E6:A0:D1:CE:A3:FE:0A:76:0A:F3:88:9B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/672938bd-d84a-307d-91e2-95ea0b8fcaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:74:95:c6:0d:c2:95:f4:21:5c:bf:45:02:de:6e:d9:49:0f:
         76:5d:30:ae:12:a6:b8:2f:74:41:78:4b:b5:f7:7d:3a:ad:49:
         5b:5e:0c:c5:52:f0:7a:7d:17:e9:9e:d8:28:89:25:30:93:8e:
         21:09:59:7a:15:be:21:dd:b1:c7:57:84:10:2a:ae:d2:d8:2b:
         ee:ec:de:2e:52:46:16:6e:04:a7:7d:5d:d8:ae:8d:d0:e9:b6:
         9c:0c:8e:48:7c:19:24:22:1e:05:7d:b2:1c:bc:7e:b3:0b:5b:
         98:2a:7c:67:b6:c3:5d:45:03:98:47:da:a5:7a:16:ed:c3:52:
         8b:b6:bf:04:87:f7:65:ac:65:c1:69:d8:36:50:a6:a6:ff:3d:
         91:11:6f:83:ef:38:ff:e8:27:4f:01:af:9b:9c:6a:88:90:9f:
         cc:36:d7:d3:4e:78:57:05:31:27:43:76:e6:9b:42:00:e8:76:
         dc:3d:35:08:44:65:a5:d1:06:ec:ce:93:de:e2:b8:d6:6c:d9:
         2c:a6:56:11:5b:d3:94:5c:3a:79:fe:c0:f4:68:d7:35:5d:73:
         f7:cd:d2:3b:8e:8d:fe:09:67:f8:0c:4c:ee:b4:28:78:ec:e8:
         48:ac:11:2b:34:c6:a9:6c:97:1f:c6:79:cb:d3:8b:9b:ea:ed:
         4b:07:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:04:51 2025 by rpki-client