Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa
File:                     16aeb59e-91b7-36f8-aed8-271f44f518a0.roa (raw, json)
Hash identifier:          nF40JrOZ5CWKGmG2lI1ey01RqXcEGLGDFxZkhD6iGE4=
Subject key identifier:   B9:71:A3:76:AC:7F:A7:5B:B9:4C:CA:22:2F:34:2B:A9:00:33:F5:B9
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F4328584A4C3B040D97580CE7C28E6E80
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     197537
IP address blocks:        199.188.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:04:0d:97:58:0c:e7:c2:8e:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=0aaae72b-d33f-4595-ae0b-5264f374b4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:2a:ba:b7:db:4d:ee:c2:d0:0d:a5:60:ab:
                    26:b9:ad:ce:b5:d8:9f:1e:82:b0:b7:28:d5:47:8f:
                    ae:bd:99:60:5b:dd:89:70:b8:30:3f:04:14:09:f1:
                    a1:98:b4:c5:eb:d8:fe:a2:2a:5e:a0:12:2d:ae:e8:
                    18:9e:28:9c:a5:9f:53:b3:0d:81:69:31:64:0a:b2:
                    89:3f:b8:b9:4d:1e:f4:fb:fd:96:9d:84:22:db:0f:
                    ec:95:ee:cc:4c:77:74:48:66:b2:37:cc:f2:53:ef:
                    42:a3:47:d1:a8:e9:6e:89:3b:93:76:09:c7:71:df:
                    fd:aa:e4:1a:45:8e:65:7b:c2:9f:ed:51:95:e7:87:
                    14:0d:38:db:d6:31:3c:5c:30:e3:16:ca:c8:92:32:
                    bf:d6:38:89:d5:c2:c5:ee:fb:71:e2:c4:ad:d7:02:
                    c7:f0:72:3a:93:29:0e:7e:64:e9:c6:09:d7:78:01:
                    a0:23:ac:67:6e:a3:35:e1:c3:41:5d:32:fe:c9:20:
                    7c:7d:a7:3c:7c:88:15:d2:2d:14:88:4a:e7:eb:c5:
                    b4:af:cb:ce:7c:00:89:8f:d5:75:36:d3:a6:3d:a6:
                    cb:ee:24:15:08:88:f4:e6:b6:c1:01:eb:7a:83:72:
                    e2:32:96:62:18:c5:5d:65:37:69:45:dd:e3:ba:ba:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:A3:76:AC:7F:A7:5B:B9:4C:CA:22:2F:34:2B:A9:00:33:F5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:06:c8:53:b3:e9:d6:ce:87:98:ce:36:67:ad:80:fe:5a:05:
         24:6e:ed:81:8c:5a:73:0d:ca:94:d7:87:e0:85:d2:46:ba:6b:
         52:b5:3a:4a:ba:54:e4:65:cd:d7:8d:05:a8:ee:ac:0d:43:ad:
         be:99:1a:ce:23:53:77:5c:82:d7:52:ed:8a:23:db:ba:6d:df:
         61:98:39:94:12:a7:50:43:34:1f:9b:86:be:b7:14:58:e4:fe:
         b2:49:a0:81:a2:bc:a2:a4:80:ae:c4:b6:bd:7a:2d:bd:4f:9a:
         1a:0c:96:75:03:0b:6a:45:bf:2d:ae:9c:7b:9f:6e:76:04:7b:
         fe:2d:99:d8:65:ce:ec:60:e6:ae:72:b9:d4:92:05:cd:81:e2:
         db:c6:d6:41:56:6c:00:78:ff:4e:2a:a8:6d:59:bd:34:7d:87:
         a5:98:36:ac:23:cb:92:43:3b:c9:46:e2:81:82:d8:13:a1:52:
         aa:59:f7:e6:b2:73:25:7e:40:78:7a:17:cb:5b:f6:f9:bb:3c:
         c6:90:b5:98:f4:06:d4:f2:e7:47:57:fb:fb:0f:ba:6d:78:e0:
         c2:da:45:a7:66:29:0f:45:12:3c:65:51:93:13:a5:47:d5:29:
         97:0b:2b:11:aa:c5:d8:f2:bb:e6:6a:9c:e2:57:0d:f7:71:dc:
         fd:ef:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:47 2025 by rpki-client