Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa
File:                     3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa (raw, json)
Hash identifier:          GBE/Xa9lCT9Dg6whDQsga5Gtma+B1kdTpFb/AU6Kqlc=
Subject key identifier:   A9:E3:78:CD:F0:18:22:D4:06:24:36:34:80:89:40:57:08:B9:4D:8D
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584B047C1BF2E457B87AB0321E00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     834
IP address blocks:        199.255.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:1b:f2:e4:57:b8:7a:b0:32:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=9dcb4a53-4ec3-49c9-bda5-b35b7a00eb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8c:e4:97:80:8b:d7:b7:86:6b:e2:a2:b1:f6:
                    94:24:0a:05:2b:fa:65:8d:48:00:a0:2e:2f:89:97:
                    ce:7d:9b:84:3c:df:a4:53:8f:df:89:8b:53:91:13:
                    93:a2:60:1c:2e:8e:ed:84:8e:cc:99:0f:8e:e9:6b:
                    df:47:93:95:92:15:04:52:ea:a5:13:bf:67:e7:73:
                    8f:27:99:9a:98:b2:1b:46:d5:00:f6:3b:71:3e:f3:
                    69:6e:74:b9:ac:88:a3:1a:98:93:0e:4c:1b:cb:ba:
                    54:dc:30:29:77:89:0a:d3:f7:c7:c9:c2:01:6d:18:
                    66:6f:31:a6:74:b9:28:81:04:ef:95:80:51:44:c8:
                    bd:6d:9a:c6:4e:b4:1e:95:99:bd:c2:92:71:81:a5:
                    8a:74:d3:bc:65:58:46:29:c4:17:66:46:34:5e:e0:
                    52:a1:ab:b4:7c:b3:f6:55:b6:b8:5f:a8:fa:38:9c:
                    5b:20:b7:c1:bf:a0:80:e3:54:2e:a9:94:62:73:0b:
                    33:2a:2a:f6:f2:a5:75:a9:a5:dd:c9:8c:16:3a:ba:
                    ce:93:05:7a:b1:dc:fd:4b:92:4b:3c:af:99:85:97:
                    a6:55:e7:43:ec:ea:9c:34:04:72:b7:2e:05:be:25:
                    89:f5:dc:80:6e:da:3d:16:be:e8:f2:e9:fc:23:a0:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:78:CD:F0:18:22:D4:06:24:36:34:80:89:40:57:08:B9:4D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:39:9e:5d:bf:ab:5e:3c:12:0b:9e:0e:00:82:ea:14:73:
         ac:73:2d:c3:37:00:02:c8:e1:1b:17:7d:b2:51:7c:65:c0:04:
         2e:54:3c:3a:a3:c5:d1:41:78:14:c2:fb:51:07:93:f7:75:da:
         58:c0:d0:95:cf:15:36:54:f4:86:35:0c:ac:f9:1e:96:b3:b7:
         53:3e:d5:a5:1d:84:f8:c8:78:06:42:eb:4d:c8:a7:b7:24:d4:
         e6:0f:e1:b8:94:1f:7b:86:47:59:ef:24:5d:4a:46:92:99:76:
         28:38:e3:d3:b6:59:6c:83:2d:6a:2c:f4:e4:b8:8e:dd:09:a3:
         4a:a7:fa:81:b9:0f:54:4a:71:39:27:00:92:f1:1f:81:d9:1d:
         c3:95:43:19:a5:f5:f9:e3:c3:5d:32:f7:b4:20:6e:f4:e2:be:
         8f:24:91:6f:1e:aa:2d:52:fa:db:2c:3a:f7:7a:ea:27:b7:da:
         a2:d7:13:29:7f:c7:79:85:d3:a8:28:ab:e6:1a:12:73:e9:c9:
         fd:00:40:b4:af:c9:37:fc:03:12:df:ac:9d:9a:62:5d:7b:c4:
         de:b4:3f:57:48:af:31:22:15:1b:de:38:13:de:bd:9e:8a:6a:
         78:a1:11:d6:0c:35:51:a8:cc:02:5d:14:48:51:a2:74:40:bf:
         d0:15:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:53:31 2025 by rpki-client