Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/50923d47-0555-3840-9840-1691b555729e.roa
File:                     50923d47-0555-3840-9840-1691b555729e.roa (raw, json)
Hash identifier:          kMCQV/JHuEOEVeRCoglsDU8SBghZxLiy6W4G5w8ufjg=
Subject key identifier:   3F:54:16:DE:2E:AE:13:17:09:4F:01:BA:60:6C:E6:39:6D:12:BF:6E
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B84B3AC2EA14E7ACC0D7A8D40
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/50923d47-0555-3840-9840-1691b555729e.roa
Signing time:             Tue 14 Oct 2025 11:16:25 +0000
ROA not before:           Tue 14 Oct 2025 11:16:25 +0000
ROA not after:            Mon 12 Jan 2026 12:16:25 +0000
asID:                     0
IP address blocks:        199.37.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:b3:ac:2e:a1:4e:7a:cc:0d:7a:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 14 11:16:25 2025 GMT
            Not After : Jan 12 12:16:25 2026 GMT
        Subject: CN=dfda3960-8598-432a-9c78-358f1f6a3e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:51:d3:3e:4a:f4:32:b8:18:e4:2a:13:71:
                    c3:64:b2:eb:7b:a2:00:f7:a1:7b:e0:85:fb:aa:66:
                    16:10:d0:9c:27:40:4c:5c:61:52:8e:d2:15:89:20:
                    22:e4:42:26:a8:50:cc:98:17:32:55:64:0f:8a:9e:
                    62:09:04:7f:57:fc:58:16:3a:0b:d1:0c:ba:01:4c:
                    a3:21:10:f8:b4:34:8f:d3:85:ce:69:41:6f:2a:a3:
                    30:3b:1e:40:90:76:e0:04:cf:d1:f1:76:01:a5:16:
                    3a:bf:b6:1c:0b:d3:1e:83:dd:e9:1c:2b:90:db:6d:
                    de:ab:74:f2:1d:11:b8:74:e1:83:d6:b7:2f:4c:45:
                    83:63:fd:d3:16:dd:e8:b2:ff:c6:63:45:ec:bf:65:
                    6d:86:fb:15:3e:98:57:0d:64:36:2e:79:5b:90:f3:
                    86:bb:de:66:c6:e7:02:ca:03:78:cb:6c:e8:7b:65:
                    0d:3a:3f:54:d6:b8:be:97:7b:2c:0f:28:a2:60:00:
                    45:8a:b3:de:da:30:91:1e:1b:7d:86:c2:98:a4:8d:
                    34:d2:f3:ef:ac:8a:6d:06:20:04:63:47:af:90:25:
                    94:b6:c7:02:23:f8:10:b4:2b:1a:08:53:93:5c:28:
                    f7:31:07:9d:cb:38:1b:8f:6c:1f:f4:61:97:52:f0:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:16:DE:2E:AE:13:17:09:4F:01:BA:60:6C:E6:39:6D:12:BF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/50923d47-0555-3840-9840-1691b555729e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.37.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:da:fb:0f:57:22:79:ef:b9:42:f8:90:fa:cf:e0:62:4e:
         5f:6c:72:0c:8a:3c:2f:e7:2f:b4:22:b0:82:23:d2:5b:bb:e2:
         7d:bd:a3:39:af:99:97:77:7e:cb:cc:3f:e9:8a:11:f2:f4:3f:
         2d:b2:00:0c:8b:d1:7c:8c:9b:bb:32:5e:02:0d:0a:d0:4d:cd:
         8c:b5:05:31:db:fd:cb:cf:66:b0:13:dc:43:3f:d0:d9:c2:5f:
         43:6e:b6:c7:34:c6:5e:5f:cd:7f:7b:b2:a1:94:0a:34:d1:a2:
         73:41:56:79:de:e0:ca:9f:9f:6c:6c:8c:93:85:ae:3b:53:05:
         ee:e7:42:81:36:5d:bd:fe:ed:21:1d:b4:2f:98:b7:fc:eb:d9:
         f2:23:14:5d:20:62:44:a5:a1:26:af:a0:84:c7:bf:5a:8b:86:
         99:e6:a1:dc:c6:ef:fd:06:29:53:53:c9:42:8b:4f:b8:ba:14:
         70:44:e2:ed:bd:f2:6e:3e:a5:8a:ef:93:ac:18:3f:bc:72:4e:
         d5:a0:f2:53:6b:38:eb:5d:7d:63:c2:a9:bf:59:c0:8e:7b:3b:
         2d:00:af:e2:ce:98:1a:df:3b:87:91:e5:23:62:d8:59:67:56:
         d6:eb:74:d7:a6:65:87:79:a0:15:2c:17:fc:2a:25:81:c3:2a:
         53:21:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:12 2025 by rpki-client