Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
File:                     a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa (raw, json)
Hash identifier:          dbjZly0inKoK208gaCPwKFK/rpq3oM9fMMj7DDOXjRY=
Subject key identifier:   94:2D:8B:D2:3E:76:65:E6:C6:61:23:9E:0E:DB:98:B8:79:74:62:1D
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584AE5C67CE2DB1C447CDEAFE700
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     17024
IP address blocks:        198.135.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:7c:e2:db:1c:44:7c:de:af:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=bd0540ed-1a90-492f-81d6-a06d83e408b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:ac:f8:4b:aa:b5:c5:bc:39:d6:a4:b3:b9:
                    68:90:e6:d1:45:60:9e:56:61:bc:68:28:8b:c5:fa:
                    6e:79:77:a0:8d:46:98:6c:c0:dd:59:fd:ee:6d:6b:
                    9e:36:b0:58:fb:56:f9:0a:e1:d2:f3:63:5a:a4:db:
                    9b:59:56:72:51:c8:d4:fc:22:c3:bc:83:02:32:ee:
                    15:5e:92:2c:70:14:68:ac:7d:6c:c0:a0:9c:b8:ed:
                    e6:c2:ed:69:97:25:26:81:7d:91:cb:61:3e:6e:f0:
                    0d:d3:1b:46:86:4e:d8:ac:42:f1:2b:1d:b1:30:28:
                    56:c0:5c:b1:93:3e:2d:64:14:a0:64:07:67:9f:ea:
                    a5:2e:6d:2e:ea:46:6e:0e:2e:5d:32:d5:0b:90:90:
                    b1:d1:bb:8b:90:1f:4c:e1:a2:ed:83:24:cf:ff:28:
                    1f:5f:ff:25:c7:1d:e3:5c:e3:34:7e:5d:d1:f6:4b:
                    8b:9d:4a:d1:d8:f5:ab:b5:3e:9b:2f:c9:d4:8e:66:
                    0e:2f:8e:1c:4a:03:e8:10:33:fe:e3:81:9a:68:13:
                    da:9b:ad:43:6c:65:98:31:32:4a:52:3a:bd:5b:2d:
                    40:41:2e:c5:3b:92:0b:03:60:ec:2e:fa:dc:46:9d:
                    c8:cc:0a:8c:30:4c:e7:81:ff:15:36:1d:2c:70:ff:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:8B:D2:3E:76:65:E6:C6:61:23:9E:0E:DB:98:B8:79:74:62:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:df:2f:6b:da:1f:46:f8:31:de:4b:c5:0e:46:91:71:ed:4f:
         86:32:a1:83:c2:dc:7c:b4:7e:7e:f2:e7:0a:95:bf:4f:d1:f6:
         bb:2d:bb:ec:7a:e3:4d:fc:fa:6b:90:9b:f5:f1:b1:20:d3:c3:
         99:7e:0e:aa:23:1c:4c:87:e6:34:e2:ce:77:7a:5e:0b:c4:13:
         f3:6d:0a:5f:aa:b6:e9:7d:b9:30:70:a8:2f:f7:cd:3c:52:61:
         59:80:17:21:6d:c2:c4:ed:b3:76:15:80:3c:20:7c:82:66:62:
         94:72:96:93:a9:1a:b9:4f:b3:fe:64:62:d0:73:d1:f3:ae:d1:
         ca:76:96:ff:7b:d6:57:81:00:51:40:ff:aa:a4:8c:4e:d7:31:
         b3:7d:64:9a:47:ea:f1:97:f3:4e:b4:a1:60:58:f1:23:ed:f2:
         7e:af:ea:e9:8c:07:13:b3:f6:17:d6:38:bd:fe:32:01:9f:ec:
         50:4c:ee:ce:a8:f5:47:ec:69:a0:f4:99:6b:7d:0e:b8:10:2d:
         cd:3e:51:e0:30:4f:6b:83:39:16:fa:2a:af:9f:10:24:ee:d5:
         87:fd:db:88:bc:7c:04:6f:ad:f4:32:6d:5d:a6:57:9d:03:a0:
         23:1e:15:5f:75:0f:a8:cb:f2:5e:6d:d9:3c:ee:65:e2:3b:0b:
         0f:0c:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:36 2025 by rpki-client