Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
File:                     79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa (raw, json)
Hash identifier:          f3wqgMvcisS00/f+FMmVkqImwz+O7a/gh7vmM1EXxEo=
Subject key identifier:   87:AA:B6:24:CD:36:A0:27:42:CF:40:4B:38:6F:7B:08:E4:08:EA:7D
Certificate issuer:       /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Certificate serial:       010D0C9F4328584A5CFB324B364CA5B8D18BA880
Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     14749
IP address blocks:        199.242.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:32:4b:36:4c:a5:b8:d1:8b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=b83aa618-80ff-459d-b2d5-f4cf995d99da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:a1:5a:03:6a:54:c9:f4:d8:5c:bc:a8:db:
                    e1:48:07:5a:ea:5a:e8:be:84:d3:ec:f9:aa:12:50:
                    b2:45:63:a6:4a:a7:2a:a6:f9:d7:c3:41:03:b3:d2:
                    62:e3:14:30:8e:58:4f:6a:84:b6:88:26:71:27:e0:
                    e9:59:2f:07:fa:ff:2b:ec:1b:f7:1a:81:43:37:7a:
                    18:c4:87:8f:6b:24:3f:ec:72:12:bd:1c:9a:13:22:
                    9a:88:24:bf:5f:63:b2:d0:71:d1:a4:76:b1:fa:b9:
                    ef:6f:e3:5e:7c:bf:a1:35:ed:b9:14:05:43:ea:83:
                    aa:d1:3e:b7:a2:66:6f:a0:1c:92:ec:53:74:74:00:
                    0a:78:5c:48:b1:35:35:fa:3c:18:df:54:ba:ef:fc:
                    d3:e9:88:1e:d6:71:da:6f:00:53:2b:f5:22:9e:29:
                    a4:32:3e:e1:4f:11:fc:2f:04:df:33:84:8b:fa:d2:
                    61:56:25:04:91:56:1a:09:53:b1:5d:ae:84:c6:37:
                    fb:50:62:43:c1:28:a2:fb:e1:8d:54:f5:a0:10:7d:
                    a5:cd:4a:39:bb:6d:ec:8d:03:f8:10:af:93:04:01:
                    d1:c3:ff:e3:68:ba:a2:79:47:9f:82:bb:57:75:04:
                    ce:04:22:5d:7f:53:a0:3a:c7:97:cf:8f:ae:68:0a:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:B6:24:CD:36:A0:27:42:CF:40:4B:38:6F:7B:08:E4:08:EA:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl

            X509v3 Authority Key Identifier:
                keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:60:0f:13:b2:d5:67:47:44:f7:29:9b:99:bc:53:c6:9b:1b:
         6f:a8:df:a6:d4:d8:e1:96:11:cc:82:b5:b1:b2:90:bf:1e:d8:
         b9:fe:69:5d:87:6f:33:73:58:2e:74:e2:ce:2d:07:44:0c:ec:
         54:47:58:e8:51:e8:ad:44:a3:db:06:88:54:5d:33:d0:c3:31:
         2b:cb:fd:aa:a0:7e:f9:3f:48:a1:ee:88:5f:0d:c1:e4:c4:b6:
         37:34:77:6e:b9:14:a7:d2:36:3a:0f:95:ce:07:30:b0:80:f5:
         60:da:04:28:78:10:6a:f2:e6:d3:85:b0:d1:15:8d:f6:bf:25:
         6f:ed:8f:7e:cc:1a:5e:22:41:d3:97:7b:10:f1:46:a1:be:29:
         3a:57:b7:c7:6c:4d:15:e1:ff:ea:bc:6f:cc:fa:42:d7:de:ac:
         0a:1b:cd:d5:96:88:80:13:98:5b:5c:d7:db:4e:0f:ca:91:1f:
         4d:5e:65:73:44:c9:65:3c:90:13:a7:da:b3:1d:2c:b4:b8:79:
         90:29:e4:c9:82:5b:49:f9:6b:00:9c:38:23:82:ec:fc:79:a4:
         26:83:0e:46:80:6d:ca:a7:8f:d3:2d:31:17:14:3e:33:ce:cd:
         68:cf:27:3e:97:8e:3f:7c:61:b2:86:12:18:76:ec:18:4e:e1:
         d2:1b:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:09:55 2025 by rpki-client