Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/192f0c51-d805-3f2a-9eca-bb4e389d0616.roa
File:                     192f0c51-d805-3f2a-9eca-bb4e389d0616.roa (raw, json)
Hash identifier:          XwvUwuK21LWwIjqgNmoId93FP3eo5AZ4Sd/7iWuX2fI=
Subject key identifier:   85:EE:E5:24:86:50:0C:75:29:F8:1B:03:A1:67:59:FB:C8:F1:82:1C
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F4328584A411047A077917741DB832D40
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/192f0c51-d805-3f2a-9eca-bb4e389d0616.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     395886
IP address blocks:        199.30.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:47:a0:77:91:77:41:db:83:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=54117b3e-bd83-4a51-843d-0b44966fafb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:47:63:c8:dc:61:f7:b5:a7:69:97:8e:ec:
                    bf:93:18:9c:98:79:cd:61:27:9c:d1:ed:8f:60:df:
                    0d:e3:25:28:d4:67:d2:8a:1c:7c:04:fb:ee:cb:ea:
                    43:ff:e3:1e:bb:ae:18:15:20:c3:ef:04:1f:f9:43:
                    33:62:38:18:23:ee:fe:09:71:3a:0a:cb:61:19:f5:
                    3c:c4:ca:d1:80:64:83:d3:89:12:2b:9a:36:10:8e:
                    d4:f5:1e:5d:88:19:2e:0c:21:09:b6:2d:29:92:63:
                    cd:20:b4:fd:d5:3f:15:cf:d5:10:cd:03:24:82:e3:
                    ed:c6:1a:4f:7c:11:7d:b9:a9:96:ee:1f:70:71:ac:
                    09:46:14:fa:37:4b:a0:b5:22:aa:13:19:62:8d:1f:
                    60:70:6a:0a:27:e4:f3:59:74:6f:1b:1f:47:db:aa:
                    5a:51:f3:52:5a:fb:6f:4d:8b:88:c4:07:f6:03:91:
                    44:d0:cb:16:97:95:31:54:89:1d:6b:d6:32:b2:38:
                    41:a6:6c:2e:b5:27:96:1e:07:d2:32:83:32:e6:f5:
                    bc:8b:aa:0a:e2:cf:44:d7:17:90:b5:5d:75:45:a4:
                    0e:2f:d6:c5:aa:23:94:49:7e:89:b9:d2:1f:e1:e2:
                    ef:84:4a:c0:03:41:44:ee:14:28:6d:07:a0:64:62:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:E5:24:86:50:0C:75:29:F8:1B:03:A1:67:59:FB:C8:F1:82:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/192f0c51-d805-3f2a-9eca-bb4e389d0616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:07:46:87:8b:4b:07:40:fe:bc:8d:56:76:fe:54:e3:25:a8:
         64:76:77:0e:46:11:ea:26:a1:32:1c:5d:1d:ce:82:96:3d:d4:
         f3:3b:35:23:06:4a:9f:b9:d6:c1:86:fe:a5:c9:7e:f9:f6:c0:
         e2:df:75:14:d0:fe:5d:2c:5e:0c:b7:d8:2e:06:9b:c5:ad:69:
         b4:59:86:f5:f3:12:85:81:b2:7e:9f:7f:96:1b:f4:ba:5f:23:
         43:8e:a4:0e:ae:22:ac:42:15:c3:55:dc:78:6b:3a:d3:bc:74:
         5f:23:d0:a9:aa:c3:c1:69:5c:3e:ff:6b:af:1d:ed:d6:e9:01:
         50:2c:87:f4:5d:b4:fc:a2:75:e3:26:fb:71:d9:9a:d5:e2:87:
         33:a9:06:2b:20:39:fa:51:a5:58:a2:27:4a:fa:09:24:34:48:
         63:5a:ed:07:73:c5:18:f2:64:e0:dd:f7:4c:2d:c5:19:9f:1b:
         d7:08:e6:9f:1d:4b:0a:c6:cc:17:56:e7:35:26:61:7a:cb:68:
         cd:eb:38:53:91:4d:d7:49:cc:dd:1a:93:17:cd:84:f7:2b:bc:
         9e:04:ad:45:0d:38:0b:f1:8d:2e:45:c3:be:c5:43:60:99:92:
         22:e7:08:0f:cf:49:43:e3:9b:04:e9:92:ac:8a:22:42:d2:e3:
         fe:ea:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:38:34 2025 by rpki-client