Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fee99e3b-657a-30e3-8030-75dd215bb1d5.roa
File:                     fee99e3b-657a-30e3-8030-75dd215bb1d5.roa (raw, json)
Hash identifier:          p19jGCpk5AEex/rgte+i5c8vYZgBH5tfBZFxLX1VGKU=
Subject key identifier:   A9:9A:9D:0F:E5:37:7C:CA:D3:31:9C:5C:47:34:AE:FD:84:89:59:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965E119B18B90694D1CA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fee99e3b-657a-30e3-8030-75dd215bb1d5.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     32564
IP address blocks:        199.243.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5e:11:9b:18:b9:06:94:d1:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5f96880f-478d-4294-8cb4-7ed1f9fe1974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:73:54:54:ee:40:b4:7a:7c:d6:38:00:9c:
                    6c:91:cd:9c:b8:6d:c2:ff:cd:e5:c1:da:83:79:c5:
                    3c:24:bd:69:47:32:01:e3:67:d9:05:2d:46:8a:0c:
                    8e:60:53:c8:57:06:cb:80:91:fb:c1:68:ed:d8:c4:
                    7e:c3:30:28:dc:c8:ec:5d:d5:a8:55:4b:71:65:d4:
                    8d:e2:06:87:8f:9a:1c:86:7f:9b:21:2d:d9:54:19:
                    b2:0a:10:9a:be:e9:7b:b9:e5:20:9d:2c:17:e4:80:
                    65:08:81:ac:7d:4b:9e:47:f4:b9:23:cd:28:d2:2f:
                    85:de:9d:a4:f1:c9:58:94:1a:58:9a:1d:64:ef:77:
                    2c:f0:86:92:89:eb:42:b7:58:48:69:01:54:19:de:
                    96:f3:fb:49:37:b8:df:7f:89:97:b4:d1:78:42:35:
                    f2:f1:f7:8f:3b:1b:e8:da:8f:84:db:86:1f:ca:1f:
                    e1:6d:ea:6f:be:10:e2:da:2f:1d:af:a0:eb:5a:cb:
                    c7:e6:af:a9:64:b3:f0:52:d5:a4:a6:e5:1f:94:f4:
                    69:42:f8:9e:55:c0:8a:8f:45:6d:da:dd:59:df:c6:
                    68:0d:06:1b:d9:14:f8:37:e9:fb:9a:92:04:43:30:
                    6f:70:18:e8:a1:60:14:13:0a:91:b5:72:f7:e8:0e:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9A:9D:0F:E5:37:7C:CA:D3:31:9C:5C:47:34:AE:FD:84:89:59:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fee99e3b-657a-30e3-8030-75dd215bb1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:56:f1:71:b7:19:ab:b8:3f:45:11:cc:dc:a2:ef:2d:78:
         05:e7:c1:5e:7b:c5:b5:ea:85:20:d3:28:f3:fc:7b:29:b1:4d:
         ed:2c:d4:e5:29:af:15:84:f7:19:68:9a:1a:f4:62:8a:82:a6:
         aa:40:6c:df:19:38:87:7e:58:a6:e3:6a:16:5c:7d:b6:f6:59:
         83:a5:28:bd:2f:18:cf:d8:f9:ff:9a:40:37:e3:99:12:b0:47:
         59:c7:43:3a:b5:88:5c:ec:66:5f:20:a2:55:0a:ea:77:78:42:
         b8:0a:a9:40:c8:21:d8:5b:99:6a:c6:c6:d8:5a:07:6a:58:4e:
         df:ba:19:f1:40:2e:5c:77:87:fc:c9:79:66:7c:23:bb:ad:16:
         ed:55:2e:21:99:ce:d5:42:bf:4c:56:57:44:cd:2a:33:a3:dc:
         14:fe:d8:9c:98:b2:55:58:89:04:39:e5:dc:0a:1f:d5:e3:f1:
         d2:ec:4b:ce:93:0e:fd:a5:13:62:91:7c:b3:54:f5:7f:1d:3e:
         69:d8:9d:af:34:ab:b2:ac:53:c6:91:d8:4a:f1:b1:13:59:1f:
         a4:28:34:08:eb:38:94:42:83:dd:53:a0:d0:d3:c4:46:45:eb:
         8b:cf:f4:10:2b:8e:5d:43:a0:af:14:42:4d:08:f8:03:a3:da:
         6f:44:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:28 2025 by rpki-client