Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5f12bde-630e-3a2e-8acb-277908be26f5.roa
File:                     c5f12bde-630e-3a2e-8acb-277908be26f5.roa (raw, json)
Hash identifier:          SWKzyYiNtzRR6rdDyLQvo5KZ8sHe9Ag0tpqxC9PK5Y4=
Subject key identifier:   85:8A:31:1E:63:CD:46:AD:81:6D:D1:5E:18:6A:AF:1C:27:11:3F:52
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196699E31287B88430C4100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5f12bde-630e-3a2e-8acb-277908be26f5.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        198.235.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:69:9e:31:28:7b:88:43:0c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b4046d20-c939-4579-9b3b-d80a01421175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:75:46:9c:02:7c:62:08:4d:0c:02:54:00:
                    3b:47:32:f9:79:20:7d:e0:e5:b7:ad:0f:1b:1f:e0:
                    6d:b6:4e:e2:13:07:30:c8:39:f8:79:74:f2:df:71:
                    75:6c:5d:3e:d5:1b:7d:41:51:57:78:b1:56:f2:ef:
                    9c:d1:74:75:6d:3d:ad:6f:1f:64:64:58:c7:3d:6e:
                    70:1e:28:49:8e:99:e9:1e:58:85:4a:46:68:41:d2:
                    49:49:29:7a:77:e3:44:3e:8e:ee:a3:31:00:5c:a6:
                    ef:f9:77:67:32:22:12:f4:1b:54:21:51:36:cd:68:
                    81:38:78:6d:77:1d:a0:49:c5:1f:75:31:03:94:45:
                    6d:70:92:1e:f5:45:d6:83:54:97:20:d0:1a:95:2b:
                    45:d1:24:09:24:dc:85:4e:8d:b5:9f:a6:1b:12:d9:
                    54:a6:0d:c9:2d:fe:4d:87:30:67:11:1e:e4:f9:ae:
                    a8:53:a7:88:09:c3:79:dd:7d:42:ac:11:5d:08:28:
                    0f:6d:fb:6b:aa:4a:8a:e7:97:a2:9c:d1:c5:ce:d6:
                    d0:fd:83:b9:58:82:bb:16:cc:07:f9:61:4d:da:67:
                    57:54:8d:e6:db:fb:53:29:1f:98:f9:6b:9c:33:f8:
                    f3:ad:22:8a:9f:d1:91:9a:78:93:84:19:b4:72:7d:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8A:31:1E:63:CD:46:AD:81:6D:D1:5E:18:6A:AF:1C:27:11:3F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5f12bde-630e-3a2e-8acb-277908be26f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:eb:c5:be:71:7c:56:08:0d:99:f4:c4:b6:40:6a:33:ae:
         54:6e:c8:2d:2e:64:58:bc:23:fd:e4:bc:0a:09:01:6a:91:67:
         d8:fc:dd:f4:90:80:b7:c2:60:b8:0f:0c:61:2b:2e:4f:e8:af:
         e0:65:26:31:f7:62:0b:bc:1f:24:78:9d:68:83:40:34:91:86:
         f4:22:cc:71:75:83:0b:29:a4:fb:bc:0c:db:09:6c:b4:81:34:
         b1:ec:98:08:7f:ed:56:9d:ea:9a:12:6c:d0:5c:7f:81:16:38:
         32:5e:d3:64:db:d2:ae:8b:3d:07:f9:e1:15:2d:01:df:7e:50:
         d1:26:93:33:f5:55:a6:42:dd:59:90:3d:db:e0:9f:79:bf:34:
         7b:61:0d:67:67:37:e7:b5:98:b7:35:b8:e3:55:83:d9:b2:fb:
         b3:b8:57:39:51:5e:d2:0d:3b:db:f4:06:35:12:31:57:88:aa:
         ff:fe:20:18:14:d0:51:6b:2f:ec:a5:13:62:97:47:ec:21:2b:
         0a:4d:69:f6:fa:f0:62:55:73:32:ed:dc:6a:03:43:d3:0a:65:
         56:a6:1d:24:f0:56:be:f0:80:5b:02:9c:d2:ff:6f:5a:89:de:
         9c:e7:f5:e9:49:e3:a8:55:77:f2:b4:f5:fb:fc:87:a4:ce:6f:
         be:17:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:35 2025 by rpki-client