Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
File:                     bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (raw, json)
Hash identifier:          MUbcIULlYqC/pGV3QgT9Ka3Gvpq1XWHu8g+hkUdclXY=
Subject key identifier:   B4:45:3D:27:A5:1F:11:95:E5:8B:A9:A4:D0:54:94:3D:32:52:79:61
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584B92DCEF48636D88D91F7E22C0
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     26677
IP address blocks:        192.197.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ef:48:63:6d:88:d9:1f:7e:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=d6a33c34-961f-41b4-b868-979734dd022d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:0c:0b:e2:da:6b:31:a9:27:75:0d:e4:82:
                    8c:c3:84:1e:19:43:cb:4b:79:c8:fe:a9:3a:18:92:
                    7f:4c:90:ef:84:99:35:a7:f1:38:70:68:96:f3:27:
                    4d:c9:11:29:58:c4:06:87:e5:d7:aa:64:85:6d:fa:
                    e5:a5:d3:db:7b:c5:c6:f6:18:a1:1d:e5:4b:46:6c:
                    9b:4e:90:06:da:d6:ff:e7:4a:70:b6:84:38:3a:8a:
                    83:c1:1c:6f:12:35:fe:52:b1:71:aa:cb:09:09:db:
                    62:4a:15:2f:fa:35:36:37:3e:15:69:a8:e2:49:64:
                    01:a6:86:70:3b:c4:7b:d9:df:98:85:29:f0:24:5d:
                    f6:ba:58:75:11:6a:0c:53:20:3e:f3:87:fd:f5:3d:
                    a1:86:43:02:cb:c4:29:88:8d:89:cd:f8:fc:dd:4b:
                    78:c5:fd:21:9c:2b:06:4a:9b:66:e8:42:b6:a8:03:
                    28:b9:f0:a3:a8:f3:28:f5:a5:4c:89:72:af:53:25:
                    c9:52:71:8d:43:bd:6c:91:29:ac:06:9f:86:ac:8e:
                    67:7a:0f:07:21:a5:c9:ca:b7:4d:a1:bd:9b:4d:d6:
                    cf:c5:6f:c7:e5:c1:bb:4e:a9:7e:4d:f6:4a:2e:46:
                    98:eb:20:a2:54:8d:1b:40:00:31:e4:df:e8:62:d7:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:3D:27:A5:1F:11:95:E5:8B:A9:A4:D0:54:94:3D:32:52:79:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:31:0e:fd:ad:24:7f:7f:ba:34:91:0f:fe:5a:22:61:37:06:
         3c:6c:52:e5:f3:b3:03:5d:cb:6d:bb:d6:cd:ec:f9:43:77:b0:
         56:0e:f0:9d:59:bb:ea:25:88:de:54:a7:16:ac:1d:e3:84:bc:
         83:38:64:9f:42:5d:f9:09:e0:cd:df:cd:f8:fc:80:53:89:c2:
         35:3e:aa:1a:da:4f:0a:65:1b:15:37:4b:31:98:4a:a2:aa:07:
         34:ee:3b:37:de:3c:4c:ce:ca:b0:80:1f:5d:4a:f2:3a:75:30:
         46:e0:4a:0b:25:f0:01:bc:48:ec:75:cf:f3:d3:da:a4:16:f6:
         37:dd:35:0a:0d:69:7a:8f:ed:fe:d7:7f:b6:26:86:95:ca:c8:
         67:7d:e1:e1:1f:8c:e1:cc:ca:0e:87:71:bd:f9:a8:57:3e:b4:
         b8:6d:cd:5d:12:59:f7:a9:3a:56:93:75:c0:49:16:e9:a5:9d:
         b8:54:f1:71:f1:47:00:95:1b:f7:d6:69:97:95:cf:3f:98:63:
         f1:2c:cc:1c:39:76:ea:96:47:d7:27:42:bc:1f:9c:c2:b5:77:
         c5:04:0a:89:b1:99:1b:61:a3:1b:d9:98:c7:18:4b:7d:0a:da:
         c2:f5:f5:c0:48:57:f3:78:08:d7:89:28:4d:98:3b:a7:a3:97:
         16:a9:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:09 2025 by rpki-client