Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
File:                     d12bd30a-acc9-3de6-8fd0-92577639758d.roa (raw, json)
Hash identifier:          mnFoHxbGoQAkgkvHINzsodmNzMeoHRqOC6A9kEZwsMw=
Subject key identifier:   5B:BD:CE:84:56:15:A5:A1:10:75:36:6E:82:E6:68:0F:1A:86:0D:3F
Certificate issuer:       /CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
Certificate serial:       010D0C9F4328584A41104EBA26A056ECC3914480
Authority key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     63436
IP address blocks:        192.124.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:4e:ba:26:a0:56:ec:c3:91:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=824b6b42-ddf7-4392-9098-59781d977f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:d5:8d:cb:47:a0:03:e1:85:21:03:a2:92:
                    91:ca:39:15:80:9e:c6:8d:f3:c1:b8:70:36:95:f0:
                    12:2c:86:35:7a:f4:40:5e:e1:b3:62:35:77:56:ac:
                    f8:90:f9:a4:5d:f7:bd:6c:fa:d0:fe:9a:3c:c9:71:
                    cc:0c:b7:91:e5:fa:79:6f:03:da:a7:57:f4:cb:51:
                    88:aa:16:f8:fa:88:2c:db:69:bb:fe:c1:e0:f1:4c:
                    b4:88:8a:28:35:59:35:1f:e7:11:c5:19:38:d8:f5:
                    50:65:fd:9c:47:40:29:b4:40:31:da:9d:c9:b2:72:
                    58:6f:a9:92:50:a2:9d:b8:2f:af:a1:db:fb:b9:ec:
                    1a:1f:8b:be:c3:68:ba:52:52:ff:34:7e:f7:72:c6:
                    0b:ba:c2:f8:c0:1e:59:12:a9:ed:a9:6f:db:6a:16:
                    68:34:f7:cf:0e:1a:96:6f:53:95:86:00:aa:a4:21:
                    8b:81:a0:db:52:de:4a:83:34:10:f7:9d:57:81:a5:
                    1c:84:cc:2e:97:d4:a8:a6:04:48:58:27:0f:f0:b7:
                    60:bc:db:a1:ea:07:4d:07:c3:fd:dd:3e:b3:b5:45:
                    92:b2:08:f8:de:9b:ac:13:11:8d:c1:68:3a:d2:bd:
                    08:b4:f5:1e:a5:52:ae:3d:80:0d:01:8b:13:91:aa:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:CE:84:56:15:A5:A1:10:75:36:6E:82:E6:68:0F:1A:86:0D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl

            X509v3 Authority Key Identifier:
                keyid:D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6c:2f:0f:14:85:60:e3:a3:37:58:e7:a3:2d:95:7e:8a:39:
         2b:6f:fb:5a:fb:fe:6c:42:72:a8:c9:b0:96:fa:b0:89:ca:28:
         5c:26:b0:1e:b3:14:86:83:30:42:ee:6e:f4:c6:ea:e5:aa:b7:
         71:ea:e4:14:f3:f7:35:42:05:1f:46:0e:af:b2:02:dc:f0:ee:
         5a:b4:78:54:73:32:40:c4:75:8d:ce:f2:c8:c4:9b:a6:fa:03:
         4d:a1:af:42:c9:0e:f3:1a:10:c8:1d:12:f8:44:8a:8f:cb:c9:
         0d:ad:a5:33:21:dd:d7:d1:ba:fd:d4:6a:91:ca:d9:b6:68:b6:
         a8:1d:cd:8e:d7:21:9f:a9:ef:fa:26:3e:a0:b8:c3:54:37:79:
         ef:d5:f6:7f:23:65:7f:3b:7c:ca:cc:d3:5a:3f:cc:66:ab:ec:
         34:27:70:c6:93:16:55:96:6f:dd:0b:92:d7:84:da:44:12:c4:
         ca:fc:83:be:d0:e7:4b:e6:c5:4c:a6:cd:87:e2:97:0a:65:19:
         3e:80:a1:5d:d6:4b:51:42:63:89:76:45:7e:0d:e6:af:b2:07:
         bc:aa:50:26:00:25:6b:c7:eb:bd:c8:ab:79:86:a8:8c:66:bc:
         2a:a0:a2:b1:f9:69:66:7a:bb:24:97:0d:9c:33:01:b7:f3:0a:
         24:17:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:09:52 2025 by rpki-client