Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43cb4205-4281-30c7-bf14-fc8519ebfa30.roa
File:                     43cb4205-4281-30c7-bf14-fc8519ebfa30.roa (raw, json)
Hash identifier:          kJhXHPKwYCj2WBlQHgzXSYJbCv2LwLVWfiFm2N2bt+s=
Subject key identifier:   DA:F1:F6:5C:81:19:34:FE:25:07:90:5C:4B:74:1B:C5:C8:60:D4:02
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19677CB0D613A326CAA3400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43cb4205-4281-30c7-bf14-fc8519ebfa30.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        199.243.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:77:cb:0d:61:3a:32:6c:aa:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2b816b98-f5cf-4912-b861-cea939cc4389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:99:e3:f9:c3:01:30:18:d4:fe:19:e1:3c:
                    01:fb:c5:8a:01:96:64:de:57:32:1e:c9:18:7e:f5:
                    97:2f:a4:f6:0e:34:a8:85:68:31:97:60:6f:1f:57:
                    07:2b:a1:78:10:03:a2:e7:29:02:f5:ee:8e:ad:3a:
                    e9:6b:30:f5:40:62:60:05:c2:d0:b6:76:47:e0:cc:
                    b3:f4:0c:ef:db:92:b1:07:03:3c:2f:cd:4d:51:fe:
                    49:38:93:3a:88:b6:42:36:c9:02:f6:5b:3e:d9:d2:
                    ba:ff:f7:fc:4b:50:b9:45:ce:92:64:bb:35:85:47:
                    4b:91:1f:7f:7e:36:89:c8:70:7e:5c:62:ba:30:f7:
                    13:58:08:a4:36:47:c3:a0:43:a0:b8:bd:cf:6f:58:
                    98:56:c5:ee:e1:75:f9:30:c8:b6:1f:e6:99:53:2b:
                    2b:9a:1c:ef:f9:40:7e:2f:e6:b1:4c:48:a3:3b:6a:
                    99:10:ba:3e:ae:a6:17:3f:b7:7b:d9:d0:10:ef:0b:
                    33:63:b5:5f:f0:4f:6f:54:e7:6f:51:45:63:91:42:
                    85:01:a7:c1:45:ee:41:9a:94:41:34:c2:22:54:a3:
                    22:99:ff:ad:a6:79:ae:b4:ea:47:46:0e:ac:a3:51:
                    9d:f3:33:b5:ec:50:31:98:0e:1d:c4:30:35:26:a9:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:F6:5C:81:19:34:FE:25:07:90:5C:4B:74:1B:C5:C8:60:D4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43cb4205-4281-30c7-bf14-fc8519ebfa30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:97:2a:9d:e0:11:55:34:01:cc:85:f7:87:07:b7:1f:f7:
         3c:9f:36:ea:dc:09:fc:6d:9f:f0:ad:60:49:7d:77:3a:1f:d9:
         ba:c8:22:56:77:4b:05:e7:09:7d:f7:7e:18:38:00:8d:b8:a3:
         36:2e:26:3e:41:90:24:4f:1a:42:2c:6f:f2:55:73:34:6b:9a:
         41:74:57:c8:ad:cd:49:ab:b5:57:c2:45:aa:91:95:77:1b:19:
         fd:53:19:3f:e7:58:b4:4c:ac:9e:f7:91:52:95:d5:7e:a6:86:
         07:e3:f5:06:d4:f9:b1:4a:88:80:ae:bf:f7:b5:2a:31:1c:d4:
         f5:4b:3b:9b:a7:ed:06:1f:49:d9:09:75:45:3b:64:c3:71:dc:
         55:f3:4d:86:30:0d:b6:a5:cf:36:6d:99:1b:f0:3a:48:1d:6e:
         00:91:3e:69:57:47:ba:40:97:2d:39:fe:0e:95:54:96:71:63:
         76:79:78:78:ba:46:86:74:00:6a:d4:0a:80:01:e2:7a:43:18:
         f3:74:22:cc:44:7f:d2:4d:c7:0c:90:4b:60:06:a1:92:c9:61:
         2d:78:ea:83:9b:9f:60:5e:40:4b:1f:e7:a8:3f:7e:e2:db:2e:
         9f:e3:4b:e7:41:79:a0:92:6f:5c:b4:e4:b9:48:ce:d0:ce:eb:
         1b:71:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:31 2025 by rpki-client