Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2df88c6-3645-3a45-a5c4-be2ebfdc8c23.roa
File:                     a2df88c6-3645-3a45-a5c4-be2ebfdc8c23.roa (raw, json)
Hash identifier:          qgRmypMjq/O6GDbadDMhgiwkJ/Pf5T+wIpdYzsJcB74=
Subject key identifier:   07:4F:7B:DB:4C:CE:91:4B:2A:5D:53:BE:16:68:29:DF:FC:3E:CC:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A51FFA02EB1E2FFCD056E9040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2df88c6-3645-3a45-a5c4-be2ebfdc8c23.roa
Signing time:             Thu 26 Jun 2025 14:36:18 +0000
ROA not before:           Thu 26 Jun 2025 14:36:18 +0000
ROA not after:            Wed 24 Sep 2025 14:36:18 +0000
asID:                     396587
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:ff:a0:2e:b1:e2:ff:cd:05:6e:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 14:36:18 2025 GMT
            Not After : Sep 24 14:36:18 2025 GMT
        Subject: CN=58b0a02e-f0da-4a05-9e7f-7057998cf349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:7d:4a:1a:e6:de:22:7a:a8:d3:df:56:3f:
                    32:88:d4:6f:2c:16:1d:54:b3:5f:c5:c9:26:04:81:
                    8c:66:aa:27:0c:39:51:ae:3e:c5:84:ee:39:7c:10:
                    85:2f:60:99:0f:4c:25:97:27:8c:59:c4:8d:af:bd:
                    44:7f:78:83:dd:1e:14:82:cb:7b:4c:84:2d:8f:e9:
                    53:ca:e4:0c:b5:85:f2:c9:cd:21:a1:39:8e:cf:b0:
                    9b:1d:fb:52:22:81:c4:f0:f9:f4:8b:42:ec:26:4e:
                    60:df:8e:42:6d:90:9e:3b:d6:81:9a:29:ec:e7:ea:
                    8c:c0:b5:0c:4e:fd:64:a4:da:5b:6d:ea:f3:84:8c:
                    12:c1:6e:65:e5:4a:22:ee:9a:0f:e8:bf:bf:11:13:
                    84:11:ae:56:a4:4a:a4:08:ce:03:2a:c0:3d:5c:39:
                    ca:49:42:5e:dc:e7:27:b3:10:59:52:1a:27:e0:98:
                    af:35:ed:7b:57:1d:e2:5a:21:7a:5d:cd:0b:c7:8f:
                    75:0e:34:50:96:05:64:15:7d:c6:33:74:d1:e2:0a:
                    65:42:fb:f0:57:20:16:48:75:d7:6f:fb:a6:23:bb:
                    9d:66:05:a5:41:e9:b2:29:8c:ed:f2:f1:57:58:66:
                    02:84:83:60:b9:9f:ca:48:53:e0:17:0a:8b:76:88:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4F:7B:DB:4C:CE:91:4B:2A:5D:53:BE:16:68:29:DF:FC:3E:CC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2df88c6-3645-3a45-a5c4-be2ebfdc8c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:2b:fd:5c:71:8c:42:fa:25:ae:a8:d0:cf:ad:00:c4:51:
         46:6e:cf:1e:34:6a:e9:8c:41:7d:25:8f:84:3c:82:e9:57:cd:
         7b:fd:bb:62:56:d9:81:54:e9:d3:7d:a1:1f:f3:3a:b6:2e:c4:
         16:12:86:3d:a3:2c:29:5c:d0:cc:bb:e2:5c:86:ad:9b:9a:be:
         f6:17:b6:4b:a7:49:31:28:9d:6f:af:bf:29:1f:97:31:f3:b4:
         6c:39:a9:e8:12:90:f0:7a:26:df:94:8a:dd:e3:f7:e3:d1:35:
         63:da:a7:40:c6:92:c4:31:25:11:5a:4e:92:7b:af:cc:de:f4:
         f9:28:37:07:1f:1c:af:da:fa:6a:f8:5d:66:63:d8:6f:27:be:
         02:86:90:0d:09:f6:ea:9e:12:ef:11:d2:e3:a2:91:e0:64:6e:
         be:87:38:4d:4c:07:d4:b7:76:0b:77:e6:90:f0:1c:dd:37:fe:
         d4:ac:be:af:40:76:b2:8e:2b:27:81:c3:10:5f:69:b2:d7:da:
         8b:83:25:96:61:1e:6e:bf:c1:03:a8:24:74:28:09:8b:b1:37:
         d9:bb:7d:9f:a4:c9:b8:d0:09:72:7e:28:93:82:71:c7:7e:1f:
         cb:0b:f5:54:25:92:33:43:d9:05:4e:50:c9:b0:b0:85:0e:8f:
         24:75:cc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:44:48 2025 by rpki-client