Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/93f3558b-1f94-3403-880e-9a27786d4878.roa
File:                     93f3558b-1f94-3403-880e-9a27786d4878.roa (raw, json)
Hash identifier:          hLQAdwTEM7I8UaAf9w/bDUUOoZauRA66+H6wWDq7ZxI=
Subject key identifier:   03:D6:01:26:C3:B5:62:B9:77:12:8F:FC:1F:2A:69:7F:9B:7E:46:A7
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584A27FCBAF8D221C499E8CF8180
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/93f3558b-1f94-3403-880e-9a27786d4878.roa
Signing time:             Wed 11 Jun 2025 13:26:30 +0000
ROA not before:           Wed 11 Jun 2025 13:26:30 +0000
ROA not after:            Tue 09 Sep 2025 13:26:30 +0000
asID:                     3257
IP address blocks:        141.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:27:fc:ba:f8:d2:21:c4:99:e8:cf:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Jun 11 13:26:30 2025 GMT
            Not After : Sep  9 13:26:30 2025 GMT
        Subject: CN=12d3443f-1f42-46ec-ad16-351b31fdd5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:bb:a1:24:03:fa:00:06:77:36:d9:05:30:
                    43:bf:22:85:16:cf:aa:27:34:53:b5:ba:cc:2e:9e:
                    a6:7a:46:6b:ae:4d:98:bc:0d:44:2b:d7:8d:dc:59:
                    7d:12:36:8d:df:06:64:2b:a9:cb:a8:49:f3:83:e4:
                    b2:b1:ce:b4:ad:bd:c1:c5:88:90:ee:0d:4a:1d:2a:
                    84:2a:46:93:3c:27:63:d0:1e:c2:39:e2:e9:3c:78:
                    93:9c:dd:70:57:11:16:86:cd:65:24:6c:18:36:1c:
                    55:6d:65:93:34:f1:f7:3e:ec:77:21:b3:37:43:91:
                    fc:18:79:0e:b6:3a:3f:99:8a:d5:46:27:14:37:2a:
                    5a:46:6d:6c:f2:60:cb:06:5e:fc:d8:22:3e:68:a8:
                    2d:11:14:54:c3:f4:0b:08:50:a3:d7:bd:1e:74:db:
                    f5:0c:ad:01:8c:6d:48:18:6f:55:ee:0f:61:ba:ed:
                    fb:8e:38:b6:df:2e:58:ac:5c:41:69:21:e5:77:08:
                    2d:51:fb:1b:5e:92:81:f7:21:79:6a:f4:1a:80:2e:
                    8f:f2:47:26:0b:d0:73:8d:ff:09:bf:a8:1e:e4:20:
                    0f:e7:da:39:6e:a1:c1:12:45:eb:16:c5:2c:fa:10:
                    73:0f:13:69:84:70:78:d6:29:81:9f:98:c6:a5:fa:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D6:01:26:C3:B5:62:B9:77:12:8F:FC:1F:2A:69:7F:9B:7E:46:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/93f3558b-1f94-3403-880e-9a27786d4878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:29:da:64:eb:02:2e:77:02:37:d1:c2:55:20:6e:fd:32:
         f6:d2:19:dc:37:00:2e:f6:d1:c8:d3:c6:3e:b7:1d:3d:f2:4d:
         6a:7f:46:4f:f0:83:d2:0d:7e:49:a6:d8:1c:de:82:fb:f4:e5:
         12:ee:e5:52:d1:60:d6:d6:aa:74:9a:ec:4d:d0:16:17:99:f1:
         91:cc:43:81:aa:e6:24:91:61:0c:6f:df:4b:d1:a6:60:43:46:
         c2:85:d0:a1:18:28:18:3f:a9:ec:7a:e6:c4:7e:d5:41:eb:3f:
         4a:80:bb:d0:6d:bd:e8:35:47:37:f5:c3:f0:61:2b:d1:45:ac:
         a6:cd:f1:13:3c:e8:fd:48:36:83:a8:53:d3:c0:b5:3e:75:a2:
         b3:1f:12:c8:44:a5:56:41:72:c7:ea:73:40:13:2f:67:5f:81:
         5e:76:f2:fa:3b:a8:c2:73:60:79:83:d3:ab:be:ea:9f:8c:51:
         e6:17:ef:93:76:a6:1f:61:50:a8:41:f1:1e:91:34:b7:6a:89:
         36:c6:9c:41:e3:f6:65:d4:25:a4:c2:e7:94:2d:7a:5a:ad:05:
         c6:22:5b:cf:25:b7:4b:7d:66:7e:0b:bd:3e:c4:16:0f:a3:53:
         3b:86:b1:e9:84:66:21:fe:2d:ce:8b:28:20:62:6d:53:9f:9f:
         4b:5d:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:10:58 2025 by rpki-client