Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa
File:                     f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa (raw, json)
Hash identifier:          tDjDVyKi4h1SkttTqsN8bsGfloB2+7JwtGhEjBK62T8=
Subject key identifier:   ED:3E:13:A5:75:FE:C0:6B:93:48:78:7D:80:F5:43:0C:2A:D1:76:E9
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AF0F1402329F704149761F600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        172.111.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:40:23:29:f7:04:14:97:61:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=0ea61aee-a0fd-4738-b45a-22302da04980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:3e:1f:a4:51:99:06:39:01:80:86:d3:c9:
                    eb:0e:70:cc:eb:ab:07:6d:d9:29:8e:88:a9:dd:b7:
                    f5:91:7b:27:e7:cb:d0:2e:1e:65:32:f8:62:c1:5d:
                    5f:23:21:ae:be:cf:fc:32:f1:a4:01:97:31:0b:16:
                    4b:e3:0f:f2:be:5a:70:1c:cd:2f:97:46:4f:4e:03:
                    ca:26:66:78:61:81:c8:54:7c:1e:53:10:70:13:cb:
                    c1:2d:fd:74:0e:0b:66:03:07:3b:36:8c:43:7b:b6:
                    2b:44:77:5a:88:ac:70:5b:11:ab:0f:49:cb:51:ae:
                    16:21:e6:da:3e:0f:37:6c:ca:67:e4:f8:ae:11:88:
                    8a:9c:af:fe:cb:cc:37:e4:a2:f9:6a:eb:ef:3e:2f:
                    45:f8:2c:b4:cc:09:21:36:94:b7:36:b9:4a:96:c2:
                    22:f6:ae:30:52:e3:5f:48:05:81:bd:f2:22:03:2c:
                    9e:d2:8c:94:f9:fb:21:13:32:90:b7:ff:c0:b0:d7:
                    d0:dc:0b:f9:88:57:c4:3c:49:2c:03:c5:06:67:a5:
                    92:b6:37:4a:57:98:9a:16:93:ad:d9:b8:c7:fa:92:
                    c7:8f:e4:4e:4f:82:19:7b:68:d4:90:54:dd:06:c4:
                    80:f4:9d:3a:ca:fb:b5:40:ae:ae:21:b1:fb:11:c5:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:13:A5:75:FE:C0:6B:93:48:78:7D:80:F5:43:0C:2A:D1:76:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:69:a7:6c:07:27:77:70:a3:c8:37:52:94:d2:b6:27:a9:97:
         f0:be:53:8a:83:30:a8:fa:97:ad:cb:3d:ee:95:19:f2:2f:7c:
         59:c9:2a:af:8b:bd:f3:7c:21:a0:37:60:03:a5:c9:09:fb:2b:
         75:b5:d5:f3:b5:a6:b7:b5:a4:67:1b:02:ad:e2:1c:ac:db:ae:
         e7:2c:7b:7b:f4:24:a8:90:19:3a:e7:78:e1:25:81:32:8b:b4:
         f7:e4:66:26:b8:b8:5b:8c:6f:dc:51:96:45:92:2f:7a:25:38:
         c7:db:60:58:0d:b6:f6:11:49:cb:73:b0:eb:78:eb:d4:8f:2e:
         e4:15:07:b2:08:28:bf:16:5c:75:f9:2c:eb:13:1b:e6:9a:a5:
         07:4d:36:9d:7f:16:39:01:29:52:47:c7:47:35:49:05:49:87:
         c6:e9:39:0a:69:6b:c0:49:ff:cf:37:6e:b7:e1:f5:bc:fd:a7:
         77:85:0a:13:a6:c0:fe:26:85:33:de:da:fb:56:f6:dd:86:32:
         dd:32:3c:7e:4d:60:c0:f5:b3:3c:c9:cf:bf:9c:72:e8:6b:92:
         fd:e2:32:06:4b:30:e0:31:04:a9:65:26:44:15:7e:12:35:a8:
         bc:86:35:bb:38:93:14:5c:1f:ea:dd:a0:c3:c7:54:fb:b4:f1:
         40:c4:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:25 2025 by rpki-client