Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa
File:                     33cbec81-889f-3f90-9a5b-e098fa182512.roa (raw, json)
Hash identifier:          e3i5/AGokJemmUH6XzxRfNhOw51eZwcTqJRjIt5Qhco=
Subject key identifier:   6E:82:1D:F9:D1:DD:68:3B:A2:3A:D6:6F:88:55:87:C9:66:DD:DE:78
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F4328584ACB40E6D1BE2764E22C8A0C40
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     7212
IP address blocks:        192.111.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e6:d1:be:27:64:e2:2c:8a:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=707f14f0-67b3-4cfa-8e5a-30cf0e830b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:e3:4a:3f:33:ab:6e:bf:29:ab:9e:9e:64:
                    ce:57:1f:a0:36:4b:83:00:84:f8:b9:46:6c:6c:b7:
                    19:df:eb:32:02:2f:65:f8:bd:e4:7d:de:fd:e2:f7:
                    c6:c1:29:54:f2:74:42:b9:6d:b3:37:7b:7c:21:f0:
                    bb:20:6c:97:64:21:a6:c9:4c:61:e6:81:7b:b5:c2:
                    aa:bd:19:22:f0:77:3c:84:7c:8f:60:ce:ac:50:c2:
                    5c:4f:f5:2a:2c:ae:4d:86:d8:83:a1:4b:60:37:de:
                    4b:3e:6a:1d:b5:44:49:38:ca:19:6d:b1:58:ac:27:
                    ff:6f:9c:84:b4:7d:f2:4f:0e:87:34:29:ec:c8:ef:
                    da:37:4c:f5:31:0c:62:10:40:84:d7:fc:1f:7e:3f:
                    8f:5c:68:1a:c9:6f:10:5a:43:97:44:45:69:a8:c5:
                    af:44:36:d6:f6:a8:19:08:2e:25:3a:24:b3:2d:40:
                    1f:95:1d:3b:d5:45:53:a1:fe:c5:48:fc:24:8d:b4:
                    cd:ca:d7:09:e5:ec:79:c0:e5:00:18:ba:d7:57:d2:
                    99:dc:2f:20:11:76:2f:8c:88:4a:ef:88:60:f6:4f:
                    d7:45:a2:4a:7d:0e:1d:24:94:88:c5:2e:4c:58:bd:
                    c1:f8:cb:b0:3f:53:ea:c4:aa:ae:58:2b:b5:48:7b:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:1D:F9:D1:DD:68:3B:A2:3A:D6:6F:88:55:87:C9:66:DD:DE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:81:ed:f8:f9:45:ab:ed:c6:a0:74:17:13:5e:3f:8a:a0:9c:
         9c:d1:a9:98:74:ac:81:3f:ae:19:a1:b9:5c:cb:03:f8:01:a8:
         e1:d4:77:10:36:53:f9:18:9e:97:09:6d:5b:0a:fe:a6:31:80:
         be:b5:d9:33:99:cd:13:f6:0c:e0:e1:86:fc:a9:d5:e6:05:51:
         23:ca:2f:19:6a:64:86:7e:3d:22:0b:13:b3:74:f4:44:18:28:
         83:b7:12:83:a3:da:a2:dc:22:cc:f5:55:af:ca:5f:fc:e7:03:
         53:09:96:4a:69:c4:cc:11:5b:1d:7a:21:ac:86:83:bc:ca:b9:
         c9:38:bb:af:f7:9b:97:dd:f0:e6:f5:1d:6c:1a:d4:48:d6:65:
         12:54:c7:f0:80:ab:f7:5e:d3:9f:db:a4:59:22:5e:ca:69:18:
         55:be:22:10:39:16:b2:22:0e:79:33:93:03:2c:0f:16:2f:36:
         85:10:f1:fa:dd:81:16:73:da:c2:7e:cb:2c:33:e2:66:a3:b6:
         5a:0b:cf:aa:87:bf:d1:b0:93:a9:6a:05:2b:05:2b:aa:02:97:
         a5:be:88:0b:04:99:8f:9b:2f:3b:31:6f:e9:96:42:22:a0:08:
         2f:1e:73:9e:a9:db:cb:0e:bb:a6:0b:59:99:c3:59:2c:6b:5c:
         a2:0b:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:14:17 2025 by rpki-client