Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/79da7553-30e1-3765-92ee-f12f1e6dde87.roa
File:                     79da7553-30e1-3765-92ee-f12f1e6dde87.roa (raw, json)
Hash identifier:          ojzsWnQSA7qriuThpKZ6KX1MjKViFBvQRHkY53PQ13c=
Subject key identifier:   2C:27:FD:81:3D:DF:9A:1E:A8:92:15:9D:D0:86:10:BE:19:19:C9:63
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A41105A46B8792AFE38ABCE09
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/79da7553-30e1-3765-92ee-f12f1e6dde87.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     11105
IP address blocks:        207.23.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5a:46:b8:79:2a:fe:38:ab:ce:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=42acde2c-ab12-4443-a83d-f16a20c5c42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:14:2c:6a:e3:83:7f:8c:28:8c:64:45:b9:
                    f7:33:74:31:6d:a2:f9:e0:59:48:a5:1a:7e:15:c4:
                    72:5b:9c:fe:82:ce:24:1f:3b:e5:12:b9:ba:bc:c9:
                    6a:36:93:fd:de:fd:bb:db:7b:7d:88:ac:f9:9d:e2:
                    71:60:38:23:0f:5f:39:92:13:a4:4c:40:2b:0b:56:
                    26:d5:67:4d:27:f4:b6:7b:28:15:9d:30:24:cb:50:
                    26:27:c7:d5:1b:6b:65:b0:91:1c:f3:72:df:5f:17:
                    72:fd:fb:26:d6:29:3e:09:3b:10:ac:aa:54:47:09:
                    e4:08:6b:31:11:d1:9c:db:bd:ee:09:2b:87:b2:fa:
                    64:d6:72:fe:ad:8e:94:ef:69:59:3f:43:9d:65:02:
                    38:da:c7:99:6d:5a:76:a2:5e:e9:82:06:26:d0:53:
                    7e:0a:b5:05:01:5d:9c:6d:20:b0:af:b8:a7:25:0e:
                    35:6b:d6:39:5e:7f:44:49:86:be:6c:f5:c5:d6:33:
                    7a:0b:9f:65:4d:5c:18:26:e6:b7:73:f2:12:66:1b:
                    1b:ee:4c:be:a9:c2:1b:93:71:43:82:6d:f8:9b:b8:
                    58:a4:c3:f4:7b:c7:0a:9b:d7:c3:2e:98:50:b6:cb:
                    a0:02:74:5f:7b:ae:59:60:bd:6d:e5:54:9c:df:63:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:FD:81:3D:DF:9A:1E:A8:92:15:9D:D0:86:10:BE:19:19:C9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/79da7553-30e1-3765-92ee-f12f1e6dde87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:4e:3a:2f:be:03:6a:b5:9c:09:bf:2c:f2:66:1d:c9:7a:
         ef:af:8c:73:3b:26:8b:db:59:c3:22:ae:b4:8f:c1:61:79:92:
         59:0b:e6:ba:17:03:cc:60:bf:2e:1a:8b:d3:79:7b:f2:bb:4a:
         c3:54:01:70:8b:9e:65:fa:38:30:8e:75:a3:2e:bb:53:f6:06:
         b9:5e:39:a7:05:b7:9b:f7:ae:40:99:b8:91:c7:f9:1d:4d:80:
         6f:e1:18:54:57:d7:6c:02:67:b2:29:45:46:be:69:c8:98:67:
         be:9b:16:07:41:e0:40:c2:aa:a8:f6:5e:20:ed:d6:26:87:4f:
         88:36:ae:63:73:4f:5e:42:dd:68:bb:c0:f9:f4:a4:a8:29:61:
         5c:ab:15:be:90:bb:d5:20:6a:9c:38:72:72:38:87:8e:f5:42:
         77:e8:c8:38:4e:9a:91:fe:a3:0e:f4:94:d5:39:57:fb:ca:98:
         c9:4a:b2:f9:a3:34:81:20:b4:49:a7:12:39:82:36:5f:26:01:
         b6:0b:24:32:ff:b9:bd:17:a3:5a:bb:1d:d4:ed:97:c9:08:6d:
         51:0c:44:bb:03:d3:a7:39:05:04:74:86:10:88:c5:49:d7:61:
         86:ae:d1:92:ad:ba:2c:0b:00:03:7d:58:84:9c:a8:38:13:d7:
         17:1e:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:25:10 2025 by rpki-client