Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa
File:                     95288216-711e-31bc-8bb7-23252f7aee62.roa (raw, json)
Hash identifier:          si1qbPKKg1oj4Vehqsm1T8ZVNDiRkzf3ho3sCbBQhdA=
Subject key identifier:   A1:8D:03:FF:11:8D:9F:58:04:48:D5:AB:80:14:ED:7E:A6:39:E8:DE
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584ADECBAAB2AB950A0B7CAD6300
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        199.187.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:aa:b2:ab:95:0a:0b:7c:ad:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=0ed67c01-37d5-48b6-a8c1-5d18f14d13e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:6b:6c:e0:af:fb:6a:ae:65:b5:5c:53:c7:
                    fa:82:80:26:e6:04:49:96:b6:24:e1:d4:73:7c:9c:
                    f6:49:18:9f:d5:e4:1d:17:17:4d:53:47:9a:d1:83:
                    0a:b4:35:d8:cf:1d:91:5e:eb:fa:5e:ce:aa:ef:ec:
                    77:45:42:4e:9f:6f:5b:bd:55:59:82:04:e3:90:d5:
                    69:46:0f:52:26:74:f2:b9:30:0a:59:9b:24:14:db:
                    1d:a2:6e:bd:48:9f:4d:76:f6:3c:ed:73:8b:05:98:
                    a4:47:61:07:ec:43:ac:13:a5:50:57:5b:64:be:94:
                    c2:b8:92:c3:20:69:00:c1:74:2e:73:9b:ed:8c:fa:
                    9d:86:69:69:04:eb:e6:99:fc:c0:8b:d9:94:f4:be:
                    b0:8d:c0:fd:87:51:c3:89:30:3b:3d:64:bc:d0:67:
                    94:d6:17:5d:93:66:5f:fc:c2:8d:71:f2:52:fa:ae:
                    8d:b5:fa:2b:0e:7d:01:e9:b2:28:0f:fb:27:0c:77:
                    cc:92:2c:71:00:e4:35:f7:91:26:14:eb:3b:7c:bc:
                    c0:76:e0:41:a6:55:c0:a4:b8:8a:98:b7:18:a6:7d:
                    47:56:93:8e:a3:de:72:dd:b9:86:35:f7:73:30:a0:
                    0f:63:ca:55:da:18:72:f5:b5:12:23:39:58:6b:92:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:03:FF:11:8D:9F:58:04:48:D5:AB:80:14:ED:7E:A6:39:E8:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:03:74:ab:02:0b:3f:44:d3:64:5a:cc:7a:d6:f0:0b:0b:
         d5:a6:e7:84:d9:9e:5f:f0:be:c0:37:e4:aa:79:69:c0:97:db:
         cb:c5:5e:9b:4f:57:e7:8b:aa:e3:61:1f:d2:11:d9:f9:ed:b5:
         c7:de:99:38:a1:44:d3:4a:aa:83:54:09:6d:22:31:e1:58:25:
         13:ca:42:ce:e3:fc:13:5d:a8:3e:6d:b2:3c:58:00:13:4c:e4:
         d0:31:9c:49:c2:a6:72:2c:6a:41:ff:dc:0f:49:ea:05:26:03:
         5e:a8:32:84:ad:f5:10:a6:61:e9:a2:f0:3d:80:2a:57:73:2b:
         13:47:41:ba:ab:10:4b:f9:e9:44:01:a9:67:55:11:74:ba:fa:
         dd:c9:e7:ac:d5:3d:f7:1b:7f:8b:92:a9:9c:71:84:a2:f8:07:
         47:5f:6d:0e:c9:36:88:e9:90:fa:1f:d1:62:6a:7a:a3:a6:33:
         a9:9e:67:8a:c4:cb:9d:92:d1:a9:7a:66:0a:7f:78:c0:45:17:
         d9:de:4c:bd:be:02:0c:7a:a7:aa:67:3c:fe:a0:26:6d:c3:c1:
         64:cb:29:ba:a6:d9:79:ee:12:6f:69:5b:a3:1d:85:38:33:6f:
         16:06:13:5b:36:a9:57:ab:11:f0:44:f4:fe:d3:8e:9b:86:61:
         52:47:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:19:31 2025 by rpki-client