Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa
File:                     fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa (raw, json)
Hash identifier:          sSisq/XfA+UmNvczroCcxn8Ns/nke3+rDRwV9UYeaSs=
Subject key identifier:   D9:33:70:D8:16:CB:70:E2:39:9E:19:63:01:F8:26:5F:DC:83:5D:87
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AD7D12A671F5E1F79F34B8900
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     22953
IP address blocks:        132.219.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2a:67:1f:5e:1f:79:f3:4b:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=caffc5a8-5019-400d-bbf2-fed7b92de1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:6b:0f:c7:33:25:e0:3e:60:d2:0c:11:2f:
                    ad:58:a7:98:a3:81:fd:a1:5c:eb:2d:b2:be:00:f5:
                    32:9e:ee:76:e3:9b:57:98:40:ed:64:8d:3f:d0:a8:
                    19:6b:58:e4:00:e1:7d:73:22:23:38:1b:d7:1d:d4:
                    29:01:26:0a:81:39:8f:01:69:51:6e:e9:0b:71:3b:
                    f8:ec:0d:0d:81:82:f5:16:36:ad:fa:9e:45:1c:5d:
                    e9:18:64:76:78:2b:c0:ad:ed:8b:3f:75:aa:5a:e9:
                    9f:72:03:83:0d:d1:f8:f4:77:c1:07:9e:53:34:b5:
                    cb:ac:b5:94:04:10:31:3b:8e:3b:07:c6:66:e9:74:
                    b3:a8:f1:11:c5:98:af:4b:d3:31:da:d5:0a:67:af:
                    50:db:6a:c6:f2:ba:4d:16:a5:51:16:34:db:c4:2b:
                    a6:61:5f:00:a8:bd:52:5c:5c:52:a0:5e:c0:0d:5c:
                    a8:a9:12:07:e4:3b:cd:47:fa:8f:95:e5:03:ea:ec:
                    99:04:9a:1d:78:17:c7:2a:f6:ee:f2:69:a2:80:86:
                    b9:97:4d:9a:21:0d:73:a6:8a:b2:b2:e6:c3:d1:52:
                    58:b5:75:c3:9e:ca:e3:6e:4e:b4:88:56:e8:43:b7:
                    42:04:68:f4:f8:15:f6:05:eb:bd:6c:58:2d:9c:59:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:33:70:D8:16:CB:70:E2:39:9E:19:63:01:F8:26:5F:DC:83:5D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/fb4ff76b-09ec-3ba4-8cca-842fe4600e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:77:bf:4d:95:ea:58:91:7c:de:91:e3:35:3c:ac:69:52:2a:
         3a:11:45:59:ac:e9:49:e4:1a:6e:a8:e8:e2:00:ce:27:f5:47:
         82:02:3b:c6:24:b9:ef:7b:74:a7:79:95:f1:a7:14:01:75:1c:
         c1:bb:fb:da:ed:ef:41:c8:dd:ce:02:db:de:16:01:8a:62:ed:
         0d:63:8e:84:32:5e:e0:3d:bf:66:3c:4f:81:f2:32:16:4a:e6:
         03:23:c1:2d:0a:f5:9d:51:08:6a:df:04:39:0b:7a:45:50:eb:
         c9:2c:79:34:9a:40:c4:f5:de:3b:1c:1a:8f:e6:b5:56:6b:13:
         ed:97:e2:0d:e5:49:9b:71:82:49:74:23:b7:64:01:48:84:8b:
         97:d3:73:f2:d2:81:c1:b8:aa:1a:36:11:2a:eb:30:f3:32:49:
         7b:43:36:fa:28:51:7f:54:b7:2c:5a:4d:cb:05:a3:c3:7e:66:
         58:a0:ca:d2:15:bc:57:82:36:2c:7a:ab:36:72:d7:4b:52:5e:
         82:ef:b3:f8:0e:cc:d8:0d:5a:e2:80:49:3b:7a:7a:09:db:3f:
         99:47:41:7b:2e:cd:67:d2:86:eb:c8:d9:f5:06:42:b3:7e:f3:
         51:5a:f2:da:a3:9e:99:7a:89:4c:ae:74:ca:d6:1c:35:0d:6d:
         6a:4b:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:53:47 2025 by rpki-client