Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23879859-a06a-38e3-a606-3e10a5f89a74.roa
File:                     23879859-a06a-38e3-a606-3e10a5f89a74.roa (raw, json)
Hash identifier:          MkbEVp77HcY1zYXNrRAJI0c/ieZSgl10O8tYshX4prU=
Subject key identifier:   20:3F:A8:E3:59:A2:7F:1B:F6:21:1C:12:98:BF:A2:4F:5A:96:21:26
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9ABAD09541A94A78A820
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23879859-a06a-38e3-a606-3e10a5f89a74.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     12132
IP address blocks:        199.243.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9a:ba:d0:95:41:a9:4a:78:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f3445dc2-83c1-487c-b134-b20b30a5c0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:a3:9c:82:f8:8b:16:9a:d8:bd:d8:e9:51:
                    a0:18:8c:87:55:e2:aa:9e:34:b2:d2:9b:47:9b:d4:
                    1f:9a:78:58:91:49:8e:ba:1b:df:de:11:b9:6f:5e:
                    fa:74:27:5b:96:01:19:0b:48:fa:39:a3:a2:08:0a:
                    71:38:ab:f0:67:e0:6f:1a:ab:01:19:22:d7:69:c4:
                    f1:c2:1b:22:1d:c2:c3:d5:e6:19:9d:68:23:22:4b:
                    73:c7:96:1d:aa:02:72:03:97:ab:ff:6a:88:9a:a6:
                    24:d2:2a:55:50:29:df:ea:43:e3:54:2c:0a:ef:93:
                    82:e1:c0:fb:c2:d8:97:ff:b6:41:3a:5b:68:f6:ce:
                    e8:68:df:c9:4e:63:bd:ca:67:f6:4b:ab:32:62:f9:
                    e1:f2:88:4c:b7:6b:37:02:03:53:40:32:57:c8:14:
                    e0:2c:d4:78:34:e2:36:4d:6a:30:fc:20:03:79:1e:
                    5d:43:72:d0:8e:46:f7:ad:fc:03:9c:fb:8c:6a:57:
                    48:eb:ff:39:82:a2:9c:72:18:e2:e7:fc:13:7b:1f:
                    96:73:e7:b9:71:31:d8:b3:88:e7:89:8b:e3:41:cc:
                    43:c7:b1:0d:d8:cd:10:d4:45:dd:fd:89:95:0c:ac:
                    f7:31:ee:5b:37:0a:78:62:9a:21:fa:60:d7:2d:c1:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:A8:E3:59:A2:7F:1B:F6:21:1C:12:98:BF:A2:4F:5A:96:21:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23879859-a06a-38e3-a606-3e10a5f89a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:40:e0:3a:38:a0:fe:f5:3d:52:c0:5b:cf:c3:43:a8:bb:3f:
         20:88:50:c9:70:dd:f4:b4:1e:a7:40:21:e6:78:6e:f2:57:56:
         2a:e5:7b:a3:64:99:e0:20:ff:bb:40:d3:eb:a1:9d:4f:c6:6e:
         e7:20:4d:68:7b:1e:af:25:c3:df:c1:c8:10:76:27:53:90:85:
         14:47:e2:c3:1c:cf:f2:7b:48:9e:a2:d5:53:c7:79:0e:cd:07:
         79:3e:fb:72:b8:64:49:51:a9:a4:eb:35:f9:21:7c:ce:04:6b:
         1c:c7:bb:20:ec:e2:aa:6e:d3:8e:68:d2:ae:ae:1c:f3:83:ae:
         ef:5b:aa:79:67:1b:34:cb:20:c8:17:86:bf:65:41:97:b9:fd:
         b3:e9:97:29:3d:64:1e:e8:04:65:5d:9a:5e:8d:d6:47:11:a8:
         1c:34:8b:0a:09:26:32:cb:3c:c0:66:cb:5b:a1:c1:02:e8:81:
         95:b9:47:18:18:a2:a7:73:71:c5:1e:40:21:ea:9e:f2:a3:d8:
         cc:aa:cc:40:3a:a4:8e:50:34:aa:e3:2a:a2:31:9c:45:56:86:
         3f:44:c3:db:45:7f:ee:9b:7b:36:4a:ff:a5:78:0a:9c:c3:78:
         b6:d3:5a:23:72:30:66:9a:f5:e4:ae:8e:a0:3b:94:4c:07:02:
         32:4e:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:58 2025 by rpki-client