Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa
File:                     194f605c-f45e-385a-9de9-b8b69c6bd841.roa (raw, json)
Hash identifier:          hj2TDpJwj2psxU3FXiJJwjxusCun1wzdQ9EOOxAQSqM=
Subject key identifier:   25:31:92:33:23:05:65:CA:46:68:D3:66:7C:C4:C4:57:FB:29:3B:8D
Certificate issuer:       /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial:       010D0C9F4328584AF521460419C66376A12A9240
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     65224
IP address blocks:        199.212.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:46:04:19:c6:63:76:a1:2a:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=c1fe5b06-ec3e-4d84-9b2c-76577d5cd2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:b1:17:c2:49:0c:7e:e1:8c:09:23:62:43:
                    d6:08:90:eb:b4:b5:7e:e6:0d:32:f9:01:a5:83:72:
                    52:16:46:30:77:ab:20:fc:15:7b:47:92:d7:9e:7a:
                    19:9d:0f:a3:a7:5f:da:ce:c8:66:6a:8c:45:2c:d7:
                    71:61:8a:e6:9a:22:6f:ae:53:9d:36:be:13:56:ab:
                    f2:64:ba:dc:70:62:e4:4f:7b:00:4b:ba:f1:9f:4e:
                    fd:ce:7f:19:84:13:3b:63:39:df:62:33:90:b5:96:
                    77:34:32:52:74:8c:c8:6b:b1:4b:99:05:f8:02:d4:
                    fd:e7:c7:b3:35:ef:1f:b8:e4:8c:0c:25:15:75:85:
                    c2:04:38:53:31:51:2e:15:a5:bb:2b:05:bc:b2:e8:
                    95:76:03:d7:26:08:f9:ba:5d:1e:29:69:d7:27:06:
                    03:24:78:0a:1b:0c:5b:6a:48:aa:eb:19:49:09:5a:
                    9f:f5:d5:03:5d:d1:e8:61:87:74:0e:51:a9:7e:4b:
                    9d:7c:b4:3c:ed:c3:cb:fb:0f:61:3d:24:e6:26:68:
                    db:e0:15:d3:6a:56:58:ab:70:d9:cc:e8:cd:24:87:
                    02:29:f0:86:db:a3:f0:9c:62:82:3b:05:0c:98:fe:
                    69:a7:1e:51:62:4f:bd:b8:3a:43:2b:f6:dc:fa:64:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:92:33:23:05:65:CA:46:68:D3:66:7C:C4:C4:57:FB:29:3B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl

            X509v3 Authority Key Identifier:
                keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:42:90:2b:cd:1b:4c:fe:6d:27:4c:36:f4:ec:44:63:aa:c6:
         9b:e6:23:53:89:d8:a6:43:dd:1d:5f:d6:e8:73:f4:39:19:e9:
         c0:2e:de:8a:94:ce:da:83:c6:22:79:c6:db:f5:29:44:aa:6d:
         fc:91:5e:6b:37:1f:43:0f:8e:e0:6b:3d:2d:ff:49:57:8a:69:
         29:27:d7:f0:b0:2f:44:23:c4:bb:76:35:79:6f:5d:b1:ad:d8:
         30:59:1a:f2:dd:59:dd:26:99:b3:f9:fe:36:96:31:40:72:2a:
         b5:5a:14:09:79:5f:50:2f:78:8f:06:e8:56:88:8d:ca:ed:55:
         64:1a:49:e2:3c:a9:96:cc:13:ba:b2:00:a2:bd:18:58:b4:64:
         c3:f7:62:1b:7b:f6:de:8a:46:2c:78:db:d7:6b:8d:5f:87:0b:
         f5:35:97:22:d5:d8:50:ad:07:a2:7f:ce:ef:65:ea:4d:2d:83:
         9c:0d:12:49:22:84:c5:4c:33:c3:09:ab:1b:3a:f6:97:5c:da:
         6e:fb:45:2f:a1:5d:16:af:9d:c7:a2:dd:89:af:ac:4a:14:42:
         2b:b3:c4:5a:89:64:1a:26:61:39:45:8e:b2:c5:b1:9a:63:f0:
         36:ae:5b:26:a2:f3:e7:95:65:cd:dc:8e:dc:97:89:1b:b6:43:
         a1:9b:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:12:29 2025 by rpki-client