Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa
File:                     499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa (raw, json)
Hash identifier:          ZsQsusPcq08+8PMz/nul0Fvin3JE3z0MbTIgFR01v4g=
Subject key identifier:   A4:A4:3A:1C:7D:1B:A3:16:D1:5D:0A:9A:D9:06:1D:1E:95:89:5C:32
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AD23C311E7AEA179152B49880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     401152
IP address blocks:        168.93.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:31:1e:7a:ea:17:91:52:b4:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=0ff198b0-f56e-4539-8898-67069f8a80d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:b3:82:e6:59:66:f7:58:0f:25:cc:13:13:
                    de:5b:95:7d:ed:79:1a:41:cc:2e:31:a0:dd:7b:bb:
                    65:2c:05:e1:ae:1e:e2:30:85:42:12:de:2d:35:e1:
                    14:8f:24:5e:ac:07:01:32:96:2f:4b:16:23:ed:dd:
                    e7:89:9b:56:e3:40:a7:62:b8:ca:c3:0e:7f:bd:90:
                    68:d3:f6:7d:1c:f6:94:7f:43:ef:c0:6b:66:4e:c3:
                    7e:ed:12:34:ff:27:b7:2e:ee:89:97:1c:cf:73:50:
                    77:bc:e7:a3:64:4e:2e:5b:01:27:e7:14:fc:98:8c:
                    fc:d2:09:0d:f5:03:40:dd:8f:2c:54:bf:e4:d4:83:
                    1c:72:e7:7d:04:f5:b9:1a:56:af:85:60:88:be:20:
                    da:3f:72:ca:9e:93:c8:4e:28:40:c8:37:45:a1:64:
                    48:cc:55:cc:4a:7f:60:d7:2a:13:c5:20:70:01:18:
                    48:40:3b:f2:40:68:47:30:42:c6:ff:1d:f7:3c:84:
                    a4:7b:c4:27:d3:e5:6f:f1:2b:63:32:7c:b1:6d:90:
                    db:e8:e5:dc:d6:dd:33:1d:e1:e2:6f:c3:af:93:c7:
                    0c:58:9b:52:c0:e6:2f:08:a6:c8:38:fe:3d:1c:f7:
                    03:9e:9d:e2:3a:54:1a:8c:9a:bb:f7:15:41:bc:34:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:3A:1C:7D:1B:A3:16:D1:5D:0A:9A:D9:06:1D:1E:95:89:5C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:61:c0:b8:19:e2:62:86:ea:2a:3f:f8:b7:52:54:2a:44:05:
         2a:a9:48:a9:5c:8a:9e:fd:df:88:a3:2f:ee:99:9b:3f:ae:d5:
         9f:e3:4a:77:a3:bb:16:0a:06:4c:20:f6:0a:e2:28:52:91:f8:
         1d:ae:86:d1:0e:a4:3b:4a:9a:55:9e:60:2b:f9:28:41:95:f5:
         09:b0:3f:dd:a6:51:a3:66:be:df:47:e3:96:6f:46:c2:ac:1f:
         bb:de:28:54:39:1e:06:e7:e6:f8:71:6b:73:0c:61:0f:f8:9b:
         02:2e:74:f6:ff:43:89:97:07:8f:cd:20:0a:4a:24:03:e0:98:
         7e:3e:3e:b2:5a:60:ee:61:5a:c0:c4:88:6d:dd:26:08:57:21:
         2d:0d:d8:f4:cd:d3:da:bb:05:07:2f:b1:0d:d7:b4:f9:88:75:
         8a:b7:1c:c7:4c:07:ba:56:5b:b6:56:e6:1f:0e:25:ee:85:a6:
         12:88:7b:d7:4c:7c:76:f3:81:81:be:3c:6e:cc:02:31:16:74:
         66:a2:c7:37:0c:62:dc:15:21:5f:35:3b:c3:a0:f5:3c:80:e4:
         08:45:cf:83:b8:fe:ce:44:d9:3d:2d:23:81:63:00:f2:6c:24:
         ac:d6:3e:0f:1a:ff:4d:d8:15:77:c3:d5:50:e9:6e:10:18:22:
         00:a1:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:04 2025 by rpki-client