Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e49ea63-ba55-3d48-b65d-6a18f53f5679.roa
File:                     8e49ea63-ba55-3d48-b65d-6a18f53f5679.roa (raw, json)
Hash identifier:          JWdERuNztFVf6hnvonQj7sluBekQLNgOrEQVe8lhysE=
Subject key identifier:   67:6E:2E:79:D3:65:49:87:0B:AA:CB:EB:99:23:6F:35:C3:95:41:59
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197157DD9F6695BCB3F4500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e49ea63-ba55-3d48-b65d-6a18f53f5679.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        198.235.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:15:7d:d9:f6:69:5b:cb:3f:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=11f4ae10-90e8-46e4-9aa4-8c5a221e6359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:f3:b9:0b:6c:58:1c:91:cc:39:60:5a:c8:
                    61:b3:ea:73:98:0e:5d:53:87:b7:d7:4c:97:7f:56:
                    07:65:84:da:a7:39:fe:7a:39:ee:79:2f:00:fd:54:
                    63:ea:ac:6d:55:04:09:71:84:24:50:36:e7:39:27:
                    7c:e6:33:ac:1d:1c:0d:31:21:a7:45:70:fc:96:50:
                    ce:ac:43:f7:1d:1a:df:5e:12:a4:6b:29:97:17:08:
                    82:a2:35:8e:f4:29:57:77:47:e0:ab:1f:e8:8d:e3:
                    9b:97:46:74:a4:e5:cd:70:0f:4c:bc:dc:cf:af:41:
                    49:2b:c2:09:71:a1:d2:67:93:d4:c4:e2:f9:42:cf:
                    a0:13:ce:fe:67:21:61:ac:74:7e:2c:03:72:ce:87:
                    b5:48:49:05:32:84:21:59:dd:17:f3:d5:ea:b1:5e:
                    be:32:54:00:33:82:f2:a2:0e:40:06:eb:f6:78:8a:
                    77:8c:b6:d6:3f:29:a0:d0:8f:8b:b2:04:03:f6:de:
                    55:86:a7:23:b8:3c:c7:5b:a5:18:66:bd:86:ef:7d:
                    52:7b:f6:4b:c1:d0:9c:b2:61:5c:db:79:f5:17:d2:
                    fb:73:85:a9:89:57:ca:ea:5a:81:68:90:fc:ef:4f:
                    30:dc:7c:f2:c1:d8:be:43:b8:07:b2:96:79:d4:24:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:2E:79:D3:65:49:87:0B:AA:CB:EB:99:23:6F:35:C3:95:41:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e49ea63-ba55-3d48-b65d-6a18f53f5679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:09:bd:f7:dd:74:32:22:6a:c2:1a:2f:ed:e8:96:ac:da:
         1f:fd:0e:2b:02:f7:a5:e3:3f:cd:36:99:b0:11:c5:37:fd:05:
         cb:5e:c6:f4:f8:0b:b9:a6:f4:ff:dc:5c:76:29:02:cf:cb:33:
         23:aa:14:6f:cf:17:07:89:56:1a:2b:64:c1:5a:33:8f:66:fc:
         f1:02:f6:a7:1e:b2:a1:f6:b5:70:52:ec:bb:13:d6:64:d2:d9:
         fb:c7:f0:2d:6a:92:4f:ad:a8:d4:a0:86:5f:44:5d:11:8e:97:
         bb:15:50:3e:d9:a1:3f:59:51:cf:d2:a9:0c:8b:2d:4f:b7:13:
         55:63:e0:c6:28:07:42:87:56:79:36:15:1a:26:b9:99:94:20:
         56:7d:0c:be:35:db:ac:ef:e6:24:16:28:0a:e3:df:37:45:c8:
         85:ab:0a:c0:2b:4b:86:c3:ec:11:d2:19:51:4d:2e:ea:b4:c3:
         0f:0c:d3:8a:8d:dc:99:0f:a0:22:9f:f5:93:00:9c:cf:96:ce:
         ad:c7:8e:e7:b1:9a:d0:3a:2e:3d:e3:b2:28:ce:1f:f2:b7:a7:
         95:07:90:4e:65:83:c9:a5:aa:d2:3b:e5:8a:08:9f:42:08:d8:
         65:ff:45:95:31:f3:d7:84:25:0d:fd:63:91:fd:55:cd:9b:60:
         c6:ea:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:25:12 2025 by rpki-client