Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
File:                     848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json)
Hash identifier:          uOIhL/KXlE5lQg1P164i2hJ7TAPr5M/CZuKKyKaftQY=
Subject key identifier:   C2:EB:FF:E4:3F:3A:D8:C0:CC:07:5B:28:50:39:1C:E3:F1:32:EB:AD
Certificate issuer:       /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial:       010D0C9F4328584B0A11682C913400F256E06500
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     398774
IP address blocks:        209.250.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:68:2c:91:34:00:f2:56:e0:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=c87b3a3c-aea5-494d-a789-a5dfd4f92d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:34:68:e0:94:cc:55:cd:45:b2:11:c2:44:
                    bb:48:38:7f:c5:b0:9f:9e:aa:a3:9a:91:4e:0b:aa:
                    5d:22:a6:a9:98:d3:3c:bb:9c:76:9f:89:d1:a2:74:
                    fc:87:24:b0:87:4f:15:34:72:ef:2f:8e:84:c6:31:
                    0a:fd:d3:5a:2e:5f:1c:4b:51:44:cc:80:28:fe:c5:
                    39:96:fa:4d:ae:12:4c:e0:07:e9:8f:ad:a4:37:df:
                    23:76:c9:5d:68:7a:f9:26:c3:f4:46:78:99:45:6f:
                    ae:bf:b7:98:d4:33:1e:0c:5e:be:02:26:3c:08:c1:
                    b0:cf:09:10:e6:e9:14:20:98:21:88:6f:6f:db:d6:
                    4d:cf:ce:37:05:9e:d5:cc:52:e9:ed:8a:7c:ac:46:
                    9c:a8:5b:d2:63:32:8e:17:25:bc:53:a5:03:82:7c:
                    91:7c:cd:39:fe:3b:4c:59:47:ad:ee:fa:23:67:29:
                    9e:5f:f4:4a:3d:52:be:af:06:d4:98:bf:c8:ba:91:
                    61:5e:14:81:0a:4d:86:bc:30:0a:43:2c:19:9b:68:
                    26:a7:de:9a:2b:ba:89:6c:df:da:a5:62:30:6a:77:
                    dd:9d:e2:b4:8b:8e:34:b6:34:b1:5c:5f:b2:08:38:
                    ef:68:32:48:7d:e2:98:d6:2b:72:79:c5:bb:ae:fc:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:FF:E4:3F:3A:D8:C0:CC:07:5B:28:50:39:1C:E3:F1:32:EB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl

            X509v3 Authority Key Identifier:
                keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:82:59:88:7c:11:db:77:b1:e4:11:c3:2e:fe:cb:39:15:
         3b:81:df:79:2c:d5:e3:e6:25:25:78:7c:33:56:01:f6:0f:34:
         32:c6:1c:c6:4c:4e:65:1b:61:58:a2:12:a0:5e:c2:22:37:52:
         be:00:4a:b5:f8:4c:c9:22:1e:22:78:55:57:79:e0:92:12:e3:
         eb:8b:97:a6:aa:20:25:4a:9a:12:fb:51:64:5f:66:c1:d5:cd:
         67:fd:91:ed:28:59:f1:a2:d7:e5:f4:f0:96:d1:6a:d5:a0:47:
         05:69:06:e9:9b:5a:7c:e0:bf:06:ff:cf:a0:1c:b3:06:00:ad:
         8d:e7:6e:87:89:66:44:19:6d:f3:7e:eb:a7:c2:ad:d4:5b:a8:
         1b:f7:cb:91:17:b6:06:ee:87:09:39:d7:91:6f:fd:75:0c:d6:
         35:3c:26:8a:97:5c:9e:99:cd:e3:d3:77:45:e2:1f:5d:b4:6e:
         6b:ba:97:78:30:7d:2f:3c:a8:ce:01:7a:cc:5d:d1:07:70:77:
         a3:ef:ac:43:54:17:39:29:77:c4:c9:2b:7e:7e:df:19:1b:c6:
         b5:a1:5d:c6:a0:38:68:61:c9:23:e8:27:e4:e8:d3:a7:b4:c3:
         be:56:6a:92:19:cd:93:a5:62:a5:b6:60:52:66:ea:a9:16:7a:
         07:55:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:23 2025 by rpki-client