Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa
File:                     9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa (raw, json)
Hash identifier:          FvWsICcl4ljOqz4zBK2pGpnZ7BFrKzNDMqS94Bnt0KU=
Subject key identifier:   79:30:5D:59:C3:2B:00:1E:F7:58:A6:20:C2:FA:20:1A:C6:41:61:C4
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584AF7EBD58D08F358467EA9C030
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        199.101.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d5:8d:08:f3:58:46:7e:a9:c0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=87419fc8-2cc5-438c-97b4-d30b19eba280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:37:30:07:da:80:43:40:07:34:19:2f:38:
                    70:83:e2:89:35:9a:90:74:8e:a4:92:2d:6e:bc:6c:
                    04:18:b6:ca:9a:43:1a:77:eb:80:89:94:83:47:6e:
                    76:1d:5a:d0:87:cc:27:fa:47:70:4b:99:49:2a:9b:
                    aa:20:f5:fc:41:a1:b0:6a:87:d2:12:b0:fc:1b:3b:
                    c6:8d:4e:7a:a9:4d:9f:e0:9a:87:af:31:c7:24:c0:
                    c1:97:04:9d:7d:d3:84:ff:31:8a:17:1f:16:ef:e1:
                    55:da:57:fd:a4:5f:00:d7:9e:04:e5:16:92:23:a5:
                    39:e7:16:08:68:60:1c:23:fe:28:d9:a9:18:94:be:
                    5a:69:62:1d:9a:ce:96:32:42:7e:f9:f3:8e:06:bd:
                    84:e2:f8:44:56:35:73:c5:41:7d:5f:3c:56:59:0e:
                    fb:9c:f1:df:44:37:63:c9:7e:a2:cb:c3:c8:0c:f4:
                    26:0b:7a:d7:d4:69:64:e6:b9:65:07:ba:cb:85:84:
                    4f:83:6c:fe:1c:40:23:13:78:57:02:88:c4:24:8e:
                    c0:a9:5c:41:9b:7a:86:51:2e:4f:ac:17:76:ed:33:
                    5c:9a:01:9b:e2:2a:f5:bd:0d:cd:82:5a:c7:c2:64:
                    06:15:97:29:6c:fb:7b:6d:83:78:c7:b5:d4:8c:3b:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:5D:59:C3:2B:00:1E:F7:58:A6:20:C2:FA:20:1A:C6:41:61:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:bd:31:f3:ed:f0:b0:d7:ea:a6:f2:a4:1d:bb:3a:5f:95:58:
         ea:de:0a:12:e9:ee:d5:bd:88:3d:91:57:da:dc:3b:0a:0e:45:
         46:5c:f7:04:b4:69:82:25:3d:a7:bb:04:65:cb:83:4e:10:86:
         6c:0b:8f:e9:99:8f:98:52:33:91:2b:31:0d:17:95:52:e5:fe:
         7c:0b:64:1b:92:eb:0d:4f:37:8b:41:d4:f2:1b:b1:e0:c0:57:
         67:9a:1b:dc:2e:56:a3:9e:59:06:70:e4:f1:7a:f0:c9:23:61:
         ac:f2:ed:fc:77:2e:fa:a8:ba:f3:11:84:cf:aa:f9:9d:14:21:
         c5:c8:9e:03:ff:df:2a:ff:a4:f7:ef:a2:eb:d4:66:ef:fe:1a:
         92:82:ad:78:e2:c3:a4:b4:83:fb:2a:fd:af:56:87:8e:e4:74:
         a6:3d:2e:fb:da:3c:3e:62:07:c9:0f:90:a1:7c:12:92:03:f1:
         e7:12:12:d0:ff:98:37:5d:6f:ea:e2:6b:6d:1b:d7:8f:d6:63:
         33:a6:e8:83:41:6d:f0:ab:ed:86:ba:3b:fb:d8:57:b1:7d:2c:
         b3:d1:24:6b:9a:56:49:2d:2a:55:ba:a7:46:f8:3d:88:50:5f:
         a0:b2:3a:3e:65:e5:d7:58:be:65:4b:c8:1e:5e:de:fc:df:57:
         09:b9:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:05:20 2025 by rpki-client