Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798/1a2132f3-2a57-34f1-a412-b01df5d1b1cd.roa
File:                     1a2132f3-2a57-34f1-a412-b01df5d1b1cd.roa (raw, json)
Hash identifier:          ktwmoVpRHnENic8z8p1O3Xn5fQkojVHoMhwRXe+JT1o=
Subject key identifier:   C7:C7:DB:45:8E:4D:BE:03:28:EB:C2:EF:79:1C:66:3A:33:E7:2D:A5
Certificate issuer:       /CN=2319d1d6-125f-4923-946a-6393715a4798
Certificate serial:       010D0C9F4328584AE8914587C123EFEA8822B800
Authority key identifier: F3:CA:A3:F2:E1:AD:D5:F1:FA:33:03:4B:1E:63:EA:64:21:D6:AE:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798/1a2132f3-2a57-34f1-a412-b01df5d1b1cd.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     33185
IP address blocks:        205.132.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798/2319d1d6-125f-4923-946a-6393715a4798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798/2319d1d6-125f-4923-946a-6393715a4798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:45:87:c1:23:ef:ea:88:22:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2319d1d6-125f-4923-946a-6393715a4798
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=172cb83e-39a5-4eb3-b29e-6a5106e6c053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:d2:48:ee:f5:ff:68:31:60:61:80:c3:8a:
                    2b:04:77:84:12:c9:8b:46:8b:c9:fa:74:ff:36:c3:
                    9e:bd:59:d9:cc:28:7f:48:5e:4c:b4:d9:c6:f0:cc:
                    e4:d4:dc:60:f2:02:55:c1:08:65:db:10:6e:40:4a:
                    79:30:90:8b:fc:da:05:4a:73:d5:97:f5:5e:b5:10:
                    68:d4:62:bd:ab:d7:05:4e:b4:db:f4:a7:b3:5d:e7:
                    a7:80:63:37:97:19:9b:0c:df:2a:60:f9:36:fa:fc:
                    52:0e:98:50:89:92:d5:6c:d0:de:71:3e:36:17:c2:
                    ee:6d:3e:07:2a:0e:ab:ac:bf:24:03:44:26:0e:09:
                    5e:46:70:a5:24:10:5a:d0:f6:f0:08:ba:07:0b:78:
                    f7:27:42:d5:45:5b:49:1f:af:7f:9a:af:5f:e5:08:
                    c5:93:9a:4f:c9:d6:02:e4:40:c5:3d:d5:4d:71:79:
                    19:80:13:78:ea:ef:f0:33:64:bd:d0:8e:6b:b0:91:
                    0d:80:61:83:d8:73:70:87:1b:0a:4d:96:0d:d9:66:
                    1f:f8:a6:87:83:15:a8:aa:fb:89:37:a6:ed:f1:3d:
                    06:bd:3d:26:2a:b6:2d:24:40:96:12:2f:f7:c5:bc:
                    24:8a:ae:81:fa:c0:ea:d3:4d:7f:92:33:e0:85:3d:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:DB:45:8E:4D:BE:03:28:EB:C2:EF:79:1C:66:3A:33:E7:2D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798/1a2132f3-2a57-34f1-a412-b01df5d1b1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798/2319d1d6-125f-4923-946a-6393715a4798.crl

            X509v3 Authority Key Identifier:
                keyid:F3:CA:A3:F2:E1:AD:D5:F1:FA:33:03:4B:1E:63:EA:64:21:D6:AE:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2319d1d6-125f-4923-946a-6393715a4798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:93:eb:60:a3:9a:a9:22:9a:46:07:a2:c5:92:dd:77:fa:99:
         15:0f:0d:52:12:31:f3:92:c5:62:72:4c:ed:f5:ae:46:e0:de:
         63:0c:45:2d:9f:00:bf:ae:65:71:b3:92:7b:cb:23:39:31:10:
         61:5d:3a:61:8b:7f:fc:28:84:f3:25:5c:c7:47:09:84:95:98:
         22:03:de:d3:cb:b8:80:32:7e:1d:59:10:8c:01:45:ba:83:be:
         db:d0:a3:9b:6f:33:38:a1:d5:39:bb:a8:d8:09:0b:8a:26:fa:
         78:17:cb:fd:9d:55:65:e1:70:a0:9a:b8:dc:38:37:82:55:05:
         ed:21:d6:7f:b4:cc:2c:91:46:df:7c:16:ba:28:60:33:e0:61:
         ec:83:ba:42:36:6e:5e:f0:8d:06:be:fc:bf:df:08:44:37:97:
         b4:e5:b5:0c:58:84:e8:7b:39:57:22:04:ea:ab:a0:bb:53:eb:
         90:16:d6:f0:a1:bc:ee:cc:b3:48:be:07:e4:2a:74:63:ab:ce:
         c8:6d:3c:2a:06:a2:7a:86:14:18:63:1a:35:cd:27:34:a5:65:
         df:a5:af:47:49:31:b7:14:4f:a2:93:b1:a3:ec:c0:c5:cb:be:
         cd:65:d7:2b:3b:58:46:d1:73:de:ff:5d:88:55:34:74:94:77:
         07:1f:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:36:38 2025 by rpki-client