Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa
File:                     b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa (raw, json)
Hash identifier:          Xtn9b4l07BX35cnA4wiMQ2uTChtrKveYTfpp+khIcHs=
Subject key identifier:   AC:FB:19:BE:D7:9A:71:A3:84:22:50:31:1E:EB:7F:19:E2:1D:9E:E7
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B1D9C2958A7A28868AD0C0380
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     0
IP address blocks:        192.58.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:29:58:a7:a2:88:68:ad:0c:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=973a5c14-e9c5-44d2-97a5-5e8de6a537da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:45:58:fc:60:0e:ff:2a:2f:01:a0:0d:27:
                    6e:5c:3a:37:7a:b3:0e:17:95:42:26:eb:49:b1:86:
                    5f:69:66:98:e4:b5:8c:6a:c3:45:a8:2a:0f:a1:7d:
                    49:f9:8f:80:83:7d:dc:9f:c9:e0:74:bc:ae:c4:52:
                    55:84:d4:1d:14:ec:a3:90:94:07:8a:98:51:7c:fb:
                    cf:20:a7:e5:02:19:83:a6:85:10:4a:4f:50:a5:56:
                    9a:10:7c:9d:f9:44:37:b9:04:19:1c:d5:60:fb:13:
                    d2:7f:47:f8:aa:fc:59:d5:05:47:7f:30:db:a9:67:
                    eb:33:4e:f0:5a:e5:fc:76:3b:3f:f8:3a:3e:4c:3a:
                    c8:61:73:a0:e8:1d:cb:0f:0a:f6:fb:c2:98:ef:72:
                    ed:ee:31:60:ca:6a:43:6c:2f:66:5e:b7:a4:76:3f:
                    1a:23:21:b0:b8:0b:bd:ca:c4:f9:13:09:f0:a3:0a:
                    78:2d:8d:92:ec:af:6f:4b:db:ef:0e:e7:20:c4:54:
                    16:b3:e3:ae:33:b4:eb:eb:ce:27:d1:be:96:9b:0d:
                    1f:c6:aa:fc:8d:0c:13:7c:64:1a:58:f8:70:eb:91:
                    69:fd:90:95:c8:73:b7:66:b8:66:f2:6c:75:59:ef:
                    ba:31:ab:d0:6d:eb:3a:4e:b4:83:2a:e5:d0:e9:e4:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:19:BE:D7:9A:71:A3:84:22:50:31:1E:EB:7F:19:E2:1D:9E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:36:54:28:95:0a:a5:b5:05:0a:31:1a:ed:30:6f:2e:19:1a:
         c2:cf:41:ca:37:83:7a:10:4f:94:c1:42:c9:b7:fd:57:5d:17:
         e0:b1:6b:ad:fb:81:cc:bb:b5:c6:d9:9c:17:dc:ff:22:ef:f0:
         f8:7a:6c:f7:c4:70:58:fd:af:20:20:03:f7:a5:95:28:25:0e:
         5e:3f:56:06:8a:43:27:d1:c7:e0:a7:74:59:e0:e6:2f:03:82:
         a7:a8:91:15:54:45:96:6a:e2:97:83:8b:c6:22:ad:d7:b4:61:
         90:f4:12:00:4a:67:02:3c:26:1d:dc:7b:77:fe:1d:e1:d0:ff:
         20:58:ed:c1:15:dc:e6:9d:51:44:f1:75:59:44:9f:73:29:ab:
         9a:01:60:c3:f0:cb:15:06:1d:20:ec:29:da:1d:3e:17:5b:cc:
         4a:de:6e:d7:99:a4:ec:db:17:79:79:62:87:03:a0:53:9a:d1:
         6e:88:be:94:0b:ec:51:9d:58:46:04:c3:bc:db:b5:67:87:60:
         c8:84:71:a9:42:54:79:aa:8c:8c:6d:74:a9:21:77:04:ac:75:
         b2:81:91:ab:15:36:13:8a:18:4d:81:05:d0:77:77:4d:fe:55:
         4c:55:77:56:11:8b:3c:8d:31:70:8d:50:4b:e2:19:fb:d1:2f:
         bb:9d:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:12 2025 by rpki-client