Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/dfd226e3-da83-35a1-9603-d0ce85afa89e.roa
File:                     dfd226e3-da83-35a1-9603-d0ce85afa89e.roa (raw, json)
Hash identifier:          YNPhJFjC7aRqVQpyOzh1UAF5Lz7YL/xr/PNQaXrPnoA=
Subject key identifier:   EA:1F:BB:77:E5:F3:E5:8C:DD:BE:C2:3C:39:6B:86:60:5F:BC:47:0E
Certificate issuer:       /CN=63fffcba-054d-4823-8758-62bf6dab2ffa
Certificate serial:       010D0C9F4328584B5141C25F89FB22BEE74C4800
Authority key identifier: 83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/dfd226e3-da83-35a1-9603-d0ce85afa89e.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     21699
IP address blocks:        199.188.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c2:5f:89:fb:22:be:e7:4c:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fffcba-054d-4823-8758-62bf6dab2ffa
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=cd24dce6-2f4d-4711-9a73-b6d8337c105f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:d7:91:8b:a6:18:3d:7f:fd:65:d8:9d:b8:
                    94:54:98:5a:8c:a0:f6:31:86:3c:54:e3:c8:40:a5:
                    29:9b:db:9a:55:79:65:c1:ea:09:ad:da:14:e0:3f:
                    8c:ce:0e:83:15:82:42:2a:1c:9a:bb:3e:6d:9f:e9:
                    cb:63:56:cd:35:fd:c5:53:48:fa:73:c2:1e:7e:8d:
                    f9:4c:cd:29:9c:1b:10:b5:d5:7d:9b:35:ab:d0:2a:
                    74:f9:45:a0:29:0e:b4:fc:f3:99:8e:53:10:86:eb:
                    2c:c8:12:f4:7f:1c:ab:6b:13:2e:d9:a4:fb:e0:eb:
                    8c:cd:62:d6:fd:a3:a3:6b:8c:aa:96:12:cf:a5:51:
                    35:80:c8:30:99:86:d2:94:67:c1:e6:25:16:9c:c2:
                    ae:9c:21:81:ef:e3:d4:34:b6:c1:34:53:57:27:6f:
                    a8:64:5a:69:f1:cb:f3:84:c5:0a:3b:73:38:f2:39:
                    bf:e5:91:97:34:28:68:46:a5:8f:55:58:9f:df:94:
                    ff:f3:78:d6:e2:ed:03:6f:a0:b2:5b:4e:92:f8:17:
                    63:7f:ae:5c:96:ed:8f:66:1f:07:17:3c:96:d1:e4:
                    44:05:9f:1a:3a:f5:b7:98:ad:c5:9c:4f:ec:26:cb:
                    42:a8:5b:16:1f:d4:c2:0f:f7:68:2e:e9:4c:18:cf:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:BB:77:E5:F3:E5:8C:DD:BE:C2:3C:39:6B:86:60:5F:BC:47:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/dfd226e3-da83-35a1-9603-d0ce85afa89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl

            X509v3 Authority Key Identifier:
                keyid:83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:04:fb:7a:91:27:01:bb:bb:54:cf:10:9e:30:86:8a:b9:
         a9:0b:e9:9e:1c:d2:04:6c:54:be:6b:91:76:e2:5b:ca:a1:6c:
         78:0a:9f:0c:fa:77:06:08:de:04:47:64:f2:f6:64:e4:cb:48:
         34:36:c9:92:0b:7b:3b:6d:86:89:d4:89:1b:c3:68:bb:3e:23:
         72:84:c2:79:30:30:45:c5:e4:0b:b1:c6:a7:54:80:6f:6a:02:
         7c:8c:7b:7c:db:8f:a8:fd:0a:96:a4:49:4b:2d:3d:80:70:8e:
         39:6d:d5:ee:ef:a8:6a:bc:bd:3e:0d:a6:4f:43:38:8c:19:d2:
         6c:1e:08:9a:31:c8:29:f0:88:72:d3:99:e5:41:34:74:9b:73:
         3d:7c:0d:ab:7e:d4:30:ec:96:db:e3:70:60:05:0e:39:0c:1d:
         05:eb:5c:e8:cd:88:1c:4d:1b:a3:89:ed:3a:49:b2:28:8f:63:
         e9:7d:a8:cb:b0:dd:70:9d:c6:b8:73:00:a1:c5:15:83:28:6e:
         57:13:74:4a:ac:2f:e3:75:ba:b9:3c:f3:82:fe:6f:fa:1c:5c:
         e0:f3:2f:48:23:6d:e8:ba:6d:f1:4b:ea:38:71:fe:e8:49:b7:
         2f:74:9f:43:4e:9f:e7:b6:99:77:d4:85:26:73:87:96:c0:e2:
         4c:4b:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:36 2025 by rpki-client