Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa
File:                     3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa (raw, json)
Hash identifier:          iW6hwbb4NiB/XNgMMGEMy23Wwm5bRyqUKK0g4gNEOpM=
Subject key identifier:   1F:3F:96:E6:3E:FE:E8:0A:87:0B:C8:2E:77:DA:0C:73:66:7B:3A:5F
Certificate issuer:       /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial:       010D0C9F4328584ACB40E7EDC8704119ECC168D0
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     31874
IP address blocks:        199.175.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e7:ed:c8:70:41:19:ec:c1:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=fca101b3-facd-40e9-9ed3-45b6880a5fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:44:30:3f:04:6a:7a:9e:6a:14:45:ee:af:
                    e9:9f:ce:88:34:0e:2f:fb:1e:4a:27:10:6a:99:e0:
                    a5:11:a9:3a:f2:6f:76:db:08:ea:d9:5d:41:b4:b1:
                    78:73:e7:7e:9c:49:8e:97:7b:a0:d0:54:59:bd:ca:
                    60:10:65:c7:3b:f0:61:cb:5d:ed:44:fe:ea:1c:c0:
                    06:ea:f3:63:08:85:50:41:4b:29:27:9f:9c:46:4a:
                    d5:3b:8c:03:0c:93:74:20:1e:be:44:e2:59:5f:0f:
                    cc:f8:af:93:7c:d0:a5:80:b4:31:14:a0:e4:64:60:
                    a0:41:95:57:a3:3f:8f:ea:2e:93:66:d9:fb:ad:25:
                    49:e0:d8:a9:74:e9:86:c4:36:da:e5:6e:36:ec:8d:
                    5c:92:fa:1e:17:a5:33:45:96:81:66:6a:03:f5:e6:
                    43:3e:82:24:57:b8:c3:29:b0:42:a0:95:48:4a:df:
                    44:c7:02:c9:0d:08:76:be:6d:16:07:a2:29:04:ee:
                    e5:7b:ce:c6:85:b4:7c:d4:67:2a:80:1a:6a:12:9a:
                    db:2c:c4:37:6a:e0:2e:89:96:96:6f:c5:3a:83:e3:
                    e8:b3:ff:cf:64:96:6d:87:cf:3c:93:0a:ec:7f:73:
                    c6:9c:cc:e4:92:4b:d6:91:1c:d6:4e:2c:93:1f:23:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:96:E6:3E:FE:E8:0A:87:0B:C8:2E:77:DA:0C:73:66:7B:3A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl

            X509v3 Authority Key Identifier:
                keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:53:60:54:6e:55:2e:01:b9:d1:69:c3:5c:6e:30:e6:5d:da:
         35:a0:04:86:1e:bb:a1:be:9f:1c:9d:a8:40:01:ce:ea:6b:ff:
         04:3b:79:08:61:c6:4b:66:eb:20:80:c2:fa:16:b4:59:6e:26:
         7c:be:85:2e:57:9e:1f:29:8c:3b:2b:fa:f4:83:8d:df:fc:39:
         87:51:ef:a3:d1:33:ba:e7:05:f1:3c:c5:e3:aa:e4:35:9a:13:
         77:fc:33:9a:bc:29:4a:1d:76:45:0b:43:d1:e3:d4:5e:5c:7d:
         ea:fd:18:78:28:32:ad:4e:ed:2a:a7:c3:b0:7c:34:d1:f8:3c:
         a9:ef:e2:2f:c6:99:9b:2a:f1:6d:20:b3:79:b1:8b:ac:7f:df:
         26:ed:3f:a9:b5:57:ab:49:91:90:44:55:50:52:92:73:b8:6d:
         a6:c5:1b:33:24:a0:b4:c3:f3:3e:12:12:be:05:01:f5:81:0c:
         28:5c:75:46:4b:60:f4:ca:2a:12:1f:23:35:59:57:00:81:3b:
         0a:fb:1f:c8:84:60:6c:1a:f3:c0:d6:3e:1b:9c:5a:b5:fd:30:
         60:d4:f0:de:db:b6:0c:33:ec:71:78:83:1d:8b:2e:74:af:52:
         a4:5c:52:e7:32:69:37:17:08:8f:e6:62:ca:12:20:83:db:fa:
         72:32:a7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:03:16 2025 by rpki-client