Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7051bb-0e1e-3cba-8585-29955a88acf8.roa
File:                     cb7051bb-0e1e-3cba-8585-29955a88acf8.roa (raw, json)
Hash identifier:          Y0aoFeHyng2hxEj4XARSsJDLBnebKweWQHaqbZPegF4=
Subject key identifier:   4A:2A:1D:0B:42:48:D0:E2:A3:9C:10:95:B9:49:F7:14:0D:E8:95:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B328C59643E4EE8F2989FBE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7051bb-0e1e-3cba-8585-29955a88acf8.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     396603
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:59:64:3e:4e:e8:f2:98:9f:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=495de75b-c7a6-4241-980e-d8805726c419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:d4:94:5b:72:f1:6f:a9:ac:b2:1e:ad:ad:
                    90:ca:7c:a8:f6:e5:23:83:cc:86:fb:9f:d5:3e:8d:
                    06:e6:b9:54:87:7d:1f:76:c2:c4:ef:d6:dd:e2:41:
                    80:5c:ba:3c:c5:c8:05:46:ad:39:d2:21:76:d1:35:
                    06:d6:ff:56:36:ba:02:47:f6:f0:83:b7:48:df:e6:
                    e9:17:a6:bb:d3:99:3d:66:38:58:fd:60:74:2e:9b:
                    d4:f9:3e:96:54:b7:21:ee:e4:64:9d:39:a9:bc:ad:
                    aa:f0:95:13:87:a9:77:e6:a0:e2:48:94:03:b1:b9:
                    fe:6a:e1:3e:dd:a6:f1:0d:01:65:7e:fe:2d:4d:ab:
                    ce:29:1c:1d:df:d0:92:ea:e5:c8:d7:14:ed:8d:41:
                    63:04:d7:b8:d4:ae:5f:c6:c4:af:5a:04:9b:d9:a2:
                    25:b4:24:4d:0d:e4:43:18:fb:a6:3a:85:72:95:62:
                    ef:af:8f:67:00:f7:94:42:eb:f5:33:d1:d5:7d:0d:
                    65:93:95:f8:40:90:46:91:17:7e:1c:f8:f6:6c:51:
                    2d:56:5d:7a:ec:e5:ac:6d:a5:59:88:01:0a:8f:32:
                    f5:01:23:7a:63:77:59:b1:3e:6d:9b:86:77:d3:c4:
                    70:a1:fc:6b:cd:4b:c0:c8:d3:77:91:b7:df:77:9e:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2A:1D:0B:42:48:D0:E2:A3:9C:10:95:B9:49:F7:14:0D:E8:95:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7051bb-0e1e-3cba-8585-29955a88acf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:59:be:ef:fa:95:bc:28:d1:fa:c7:c6:5d:e5:5c:4d:1c:85:
         5b:76:8d:a7:bf:ac:cd:6f:af:f4:75:ed:b6:cd:17:79:4e:74:
         3e:94:63:eb:c9:fd:3a:b8:d1:dd:e0:a3:d9:dc:ca:ca:5e:c1:
         64:09:97:c7:ee:df:71:e9:6c:8e:37:4b:9e:ed:37:72:8f:fb:
         92:68:39:3f:f5:4f:6c:26:44:68:bf:73:52:84:69:4c:da:c8:
         af:bc:e4:df:a1:2e:68:ef:12:c8:87:78:5b:1c:e7:4d:d5:ab:
         71:a1:c0:e5:8d:be:14:1e:01:12:a2:6f:02:75:da:e7:a4:1e:
         0b:62:7e:f4:ed:4d:14:d4:7e:97:c5:27:f0:16:c5:1b:ad:9f:
         8a:96:3e:09:31:81:40:f3:7a:7e:c9:1d:ac:e2:70:2a:f1:91:
         82:40:73:9c:8c:73:22:0e:83:f5:4e:89:1f:b3:32:54:dc:22:
         a6:8c:70:f2:a0:70:8c:14:99:2b:0f:41:63:bf:85:3d:8b:29:
         1a:ce:bc:46:d0:34:58:52:a3:3a:eb:a0:28:53:ba:8e:a5:7b:
         28:95:d1:ad:c6:ab:60:1b:60:d6:b9:f6:ae:a5:78:5d:0e:9e:
         9f:5e:9a:69:dd:ad:11:b6:f9:d6:54:b5:55:06:26:ea:02:49:
         70:a4:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:12 2025 by rpki-client