Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/73703011-ea37-3788-9983-a3c22711def9.roa
File:                     73703011-ea37-3788-9983-a3c22711def9.roa (raw, json)
Hash identifier:          /sgLXnHlhXm5DMNq9dQ6Iet9NsDJlFh3AvfZYELvFdE=
Subject key identifier:   F5:8C:DE:AE:47:81:DD:28:C0:EE:89:65:37:FB:C3:90:23:6E:39:E6
Certificate issuer:       /CN=94f832e1-6acf-4c03-921c-64ee0a78e959
Certificate serial:       010D0C9F4328584AD23BD0856E0624E8B1E6D5C0
Authority key identifier: 5B:20:1E:F6:AA:8B:11:93:8B:75:FD:E3:82:A2:DE:E8:F0:B4:D2:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/73703011-ea37-3788-9983-a3c22711def9.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        198.134.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/94f832e1-6acf-4c03-921c-64ee0a78e959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/94f832e1-6acf-4c03-921c-64ee0a78e959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d0:85:6e:06:24:e8:b1:e6:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f832e1-6acf-4c03-921c-64ee0a78e959
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=1f62958e-85c4-4127-9300-d7b3e32b3856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:2a:d4:db:6b:74:fd:31:02:23:88:42:3d:
                    3d:b4:5e:e0:2d:71:8a:56:34:17:00:87:0e:59:fc:
                    f9:40:04:24:9b:cd:13:eb:1a:38:a8:27:83:ff:8d:
                    eb:dc:49:00:11:04:27:3a:77:19:5f:e1:b7:9b:ef:
                    f6:45:f9:ee:7d:63:ac:19:9e:f3:70:dc:ed:5d:6b:
                    bd:ee:84:3c:aa:97:5e:a5:46:3b:3a:ed:92:5d:fd:
                    3f:90:db:29:db:89:a8:e5:09:9b:80:fc:be:4f:ce:
                    01:5a:1c:b0:e9:97:46:1b:c2:88:f7:87:ef:84:a9:
                    0f:81:a3:e1:07:c5:e4:91:02:6b:cc:09:3b:d1:6d:
                    9f:62:09:4f:c7:be:d0:20:f5:fd:ea:97:13:70:be:
                    1d:db:c5:0b:93:f8:4e:be:7c:cb:a9:a9:06:86:ee:
                    31:0f:d6:0b:bf:84:56:c8:e0:f8:6d:9b:11:74:33:
                    ad:2c:e5:16:59:35:d4:42:58:15:43:19:46:1d:04:
                    f9:da:5e:2b:a3:24:35:f1:b6:1f:76:62:46:92:89:
                    1e:88:fc:78:26:f4:80:4e:ce:f7:3c:6f:22:f2:03:
                    a1:9d:14:78:1e:66:8a:3b:4b:9c:96:29:ff:c8:89:
                    0a:af:3c:48:22:b6:79:66:2d:54:ae:fc:cd:7f:ee:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:DE:AE:47:81:DD:28:C0:EE:89:65:37:FB:C3:90:23:6E:39:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/73703011-ea37-3788-9983-a3c22711def9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/94f832e1-6acf-4c03-921c-64ee0a78e959.crl

            X509v3 Authority Key Identifier:
                keyid:5B:20:1E:F6:AA:8B:11:93:8B:75:FD:E3:82:A2:DE:E8:F0:B4:D2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:7b:f9:87:14:6a:4b:8c:0c:fb:6a:f7:44:02:2c:86:29:97:
         a7:d5:8d:c2:27:e5:42:f4:a1:f5:14:16:3e:d2:13:c9:c2:45:
         e6:3f:5c:0e:01:40:76:a3:28:92:a6:0b:f6:b7:12:b5:e2:5a:
         d8:ca:81:26:29:98:8b:2f:ba:9a:e0:5d:88:e0:51:80:f4:88:
         78:88:cd:99:55:b1:66:78:3c:9a:58:6e:3f:9e:fa:8f:ef:d8:
         6b:81:fd:68:81:cc:c1:57:c2:13:54:e8:22:b1:1a:46:43:87:
         1f:8f:55:8e:bc:5c:83:ab:95:47:2b:04:a6:b7:73:f4:a1:a1:
         2f:c8:76:88:e7:2c:83:db:59:84:93:c3:4a:3c:a5:2c:ea:dc:
         00:92:8a:8f:41:3a:e6:72:72:e0:12:06:0d:45:ec:8d:ad:80:
         53:a3:49:42:f0:5d:d4:a8:20:90:93:87:52:47:93:07:83:40:
         1f:e4:0a:10:2a:15:30:57:ab:49:5f:ff:8a:fa:65:35:e3:d0:
         1d:21:e8:31:7d:41:3f:8c:3e:50:bc:1e:3d:81:80:d6:e6:a0:
         eb:17:34:8d:ca:a1:87:18:18:99:7c:49:38:6a:9d:4c:7b:5c:
         ef:96:02:54:88:a8:e9:5b:55:3b:8b:6b:08:f9:fd:b3:c8:d8:
         5c:a1:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:29 2025 by rpki-client