Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/541a8075-0d2d-3e5e-af2a-5e5d4626afee.roa
File:                     541a8075-0d2d-3e5e-af2a-5e5d4626afee.roa (raw, json)
Hash identifier:          M4mop1zeMk/SiwDW9HxH4bWQwPniAfLO03Wd1WQqoLU=
Subject key identifier:   53:E8:E0:A5:FA:FA:32:3A:09:F6:D3:07:BB:64:FF:2B:CE:23:68:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D6832AB3DCE947A90EE20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/541a8075-0d2d-3e5e-af2a-5e5d4626afee.roa
Signing time:             Thu 22 May 2025 12:34:51 +0000
ROA not before:           Thu 22 May 2025 12:34:51 +0000
ROA not after:            Wed 20 Aug 2025 12:34:51 +0000
asID:                     397204
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:68:32:ab:3d:ce:94:7a:90:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:51 2025 GMT
            Not After : Aug 20 12:34:51 2025 GMT
        Subject: CN=5dd1d7c1-2af5-45e1-83bc-55fcef112e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:6c:c6:51:8e:df:34:30:ea:34:a7:0f:0e:
                    3e:77:fc:31:62:a4:9f:5f:4f:27:a1:82:1b:5a:b6:
                    d3:71:72:f3:c0:3e:ea:8c:69:3d:2a:98:26:de:7b:
                    85:b9:77:f1:e6:a4:86:84:c2:25:ac:8e:a8:d5:0f:
                    cb:d6:50:9a:94:42:31:1d:7a:5c:83:de:67:31:ee:
                    bd:5e:e0:7b:74:f1:74:d5:4f:ad:d6:2f:93:39:90:
                    0e:83:f4:81:cf:ba:24:df:44:c9:89:aa:83:28:0d:
                    85:67:83:db:69:26:b0:96:27:74:32:99:02:a6:ad:
                    be:84:91:fd:87:41:12:e6:d7:3d:30:39:bc:19:ba:
                    91:93:7a:4d:76:f2:36:d0:cf:51:8a:52:16:16:8a:
                    d5:07:7e:f1:f2:a6:da:e9:be:f9:7b:ac:c1:2b:52:
                    78:5b:9b:02:7d:8f:3d:f9:ca:d1:00:24:97:13:a5:
                    6f:d1:ce:1c:3e:5a:31:86:86:fd:03:18:c1:79:07:
                    c4:bd:48:d7:c3:cf:95:85:12:39:43:a5:ae:e5:2e:
                    46:bc:c4:e7:7b:2f:3c:ab:78:a0:38:c5:75:eb:55:
                    28:e0:a4:22:69:13:41:8c:f2:b3:1e:08:6b:b1:cf:
                    34:e6:a5:c0:c4:ed:ae:21:27:1c:33:fe:fa:b1:15:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:E0:A5:FA:FA:32:3A:09:F6:D3:07:BB:64:FF:2B:CE:23:68:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/541a8075-0d2d-3e5e-af2a-5e5d4626afee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:de:fa:9a:34:8b:24:db:6b:a1:02:8e:ec:9b:0d:34:b1:
         27:1d:33:13:1c:2f:ae:24:89:29:66:6a:ec:cf:85:5e:86:8c:
         14:55:5c:30:63:e5:66:9c:f3:13:1b:c5:67:29:63:52:b3:08:
         7b:de:c6:4b:b9:62:d6:48:f4:06:89:ed:9e:cb:90:81:64:99:
         72:a6:0b:0a:d7:73:9c:93:cd:89:14:d4:0a:28:9f:35:bb:8f:
         f8:d2:29:49:ab:b4:c4:87:28:61:ef:45:13:85:d6:b2:8f:d5:
         f6:e8:96:95:3c:9a:11:ad:aa:c0:06:b1:fd:e9:fb:d5:d9:e8:
         09:ce:4c:33:51:a9:ad:b3:35:54:63:5a:76:ea:64:5b:4b:30:
         6b:c2:65:57:6c:60:60:6f:a7:4e:bf:f7:08:d2:1d:e5:ae:fc:
         72:4b:f4:04:05:6c:56:a4:60:c7:af:5c:2c:3c:bf:39:06:fa:
         31:5f:f0:19:36:5a:17:85:54:0f:85:30:fc:2f:44:6e:c0:cb:
         dd:35:26:da:62:55:28:c7:5f:9a:df:12:45:22:ce:5b:a6:e4:
         c6:22:f9:92:38:f6:0c:c2:00:ed:ce:ae:5f:4e:70:c2:c9:1d:
         35:8b:d2:17:ea:4c:c4:ff:f1:bd:e9:04:3d:e8:7c:ad:e1:db:
         11:99:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:40:56 2025 by rpki-client