Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d57f387-20ef-3163-805c-98adb9780384.roa
File:                     5d57f387-20ef-3163-805c-98adb9780384.roa (raw, json)
Hash identifier:          aPnJZX8tFhX/A1ziNQXL2omoDByNdJaR76OHcTFp6J8=
Subject key identifier:   1F:B7:BA:97:36:3F:E9:D2:9F:86:7C:31:A9:B6:BB:E5:7E:65:E7:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D68C0BC5B6AB4D7FB5E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d57f387-20ef-3163-805c-98adb9780384.roa
Signing time:             Thu 22 May 2025 12:34:51 +0000
ROA not before:           Thu 22 May 2025 12:34:51 +0000
ROA not after:            Wed 20 Aug 2025 12:34:51 +0000
asID:                     396566
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:68:c0:bc:5b:6a:b4:d7:fb:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:51 2025 GMT
            Not After : Aug 20 12:34:51 2025 GMT
        Subject: CN=cb733e00-fb8f-4522-a568-5a3ede79f6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:a5:a2:5f:52:8d:29:79:8c:70:86:80:a3:
                    80:c2:63:c5:c1:2a:15:1f:8d:c4:e6:83:0a:82:09:
                    98:9a:c3:cf:46:7a:bc:bb:ed:f8:b1:a9:0e:1f:2a:
                    ab:f6:c8:14:6b:8e:de:a0:20:ed:1e:84:79:e4:60:
                    b4:61:93:98:54:26:00:6f:57:4e:f5:cc:11:c6:11:
                    b5:3d:8d:1c:ef:ee:41:45:a2:ba:85:b3:ec:62:bf:
                    27:cc:a1:10:16:1b:ff:2c:09:1d:4a:f1:16:20:3c:
                    41:4f:b7:97:b1:89:bd:7a:61:cf:b8:89:c7:0b:4a:
                    49:c3:85:65:39:85:8d:86:33:32:4d:96:d8:61:6a:
                    dd:94:af:33:a1:99:d3:37:4e:45:eb:d0:81:13:21:
                    3b:56:cb:06:6d:2d:5b:50:75:7e:0f:04:97:68:28:
                    40:de:d6:3b:a2:59:63:b6:8a:df:f1:1e:13:9d:26:
                    96:34:b8:62:a5:e2:d9:67:2c:29:ba:2b:57:3e:6c:
                    3a:d1:ef:35:67:0f:fa:41:39:37:ad:c1:5c:eb:8d:
                    7d:11:b1:bf:1e:d7:e7:e3:ce:ae:6e:52:ed:80:60:
                    6a:d8:c5:b4:67:be:2a:fa:98:82:f3:0f:15:55:d7:
                    a0:9a:33:53:ec:24:ae:07:e2:4f:c8:d1:c6:21:fe:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B7:BA:97:36:3F:E9:D2:9F:86:7C:31:A9:B6:BB:E5:7E:65:E7:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d57f387-20ef-3163-805c-98adb9780384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:2f:a2:ed:7c:ba:3e:21:15:98:b4:bb:de:29:a4:63:76:
         37:e1:2d:36:f6:65:a7:82:16:fb:55:40:33:dc:6c:e0:f9:1e:
         a8:02:4f:43:d9:50:01:ae:13:1c:13:41:e3:6b:8d:87:00:06:
         7f:ab:00:f0:62:a6:99:27:fb:0e:b6:50:f8:95:8d:6e:3e:ba:
         54:7e:87:76:da:0d:b7:de:dd:89:f6:41:90:f5:a0:22:5e:b1:
         56:63:0f:ec:65:6c:42:70:a4:c2:27:a0:5c:23:39:f4:ea:ce:
         d5:26:cc:ab:f9:51:3a:fd:ce:40:e6:03:b5:fc:d5:04:2a:53:
         e4:98:22:66:17:c5:dd:19:a7:88:dd:79:81:d7:15:7b:5d:17:
         fa:ea:39:6f:ac:d8:b8:df:c5:f0:ed:7a:b4:53:63:63:23:c6:
         54:f4:16:a9:ac:c7:72:be:fc:78:d1:ba:80:b9:f4:bf:a1:9b:
         d5:b9:fd:8f:8c:57:28:a6:b8:ad:64:83:82:3e:59:46:5b:34:
         76:1f:7e:3b:d8:a0:f8:30:6f:58:7d:8d:c1:b8:fd:93:ea:ba:
         14:90:28:91:81:10:33:1f:c3:18:36:09:53:a9:d6:75:3b:06:
         1e:a3:e9:be:ad:4f:af:49:0d:ba:e3:7e:ba:b6:f7:23:29:96:
         a2:19:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:08:26 2025 by rpki-client