Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/960fe7df-e5b2-38f0-9edd-b93abf137ad2.roa
File:                     960fe7df-e5b2-38f0-9edd-b93abf137ad2.roa (raw, json)
Hash identifier:          WbBaKO6xLTPLwiOq291k4TYUhgO/mfxQRsp4VO7ZP30=
Subject key identifier:   77:DE:9D:C6:D0:4B:8D:9C:B3:28:8D:91:E0:0C:2A:37:F4:E7:D2:54
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584AF256985769BAE2A725106100
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/960fe7df-e5b2-38f0-9edd-b93abf137ad2.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        199.184.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:98:57:69:ba:e2:a7:25:10:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=8cbd4166-311f-4352-8ad7-5d7ba499a6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:27:3e:cb:a0:aa:66:a6:49:b4:fe:b2:67:
                    14:7c:22:d8:d4:f6:da:b6:6c:f8:ab:6a:14:02:ab:
                    3b:e1:90:59:1f:ed:57:c0:ca:0f:dc:7a:42:9f:93:
                    3a:39:64:b8:30:93:3f:f5:e8:2f:46:ff:dc:cc:76:
                    00:92:61:a3:e1:2f:a4:4c:72:a2:75:41:4b:40:cf:
                    3b:f8:c0:8a:f7:b4:fa:47:87:c3:96:91:29:a1:6f:
                    aa:14:fd:ea:29:68:89:02:42:ef:16:f5:3d:8c:bb:
                    88:50:54:08:ac:09:cf:09:1e:cc:e1:42:fd:59:f8:
                    80:9a:1d:cf:47:62:40:4e:ab:54:b4:51:10:cf:16:
                    02:a9:e4:fd:2d:ce:69:1a:e9:1e:e5:52:16:2e:4f:
                    8f:2d:47:e1:1f:2e:ed:12:eb:db:64:14:68:bf:a0:
                    03:6a:6a:43:2f:e3:24:e0:a1:fb:d8:24:78:1d:d1:
                    82:6a:d8:64:27:1a:ad:e9:d8:35:57:a6:cc:ab:55:
                    29:58:78:09:f3:2f:a3:aa:e0:09:7d:8c:b4:cf:59:
                    5b:fd:db:71:c6:d2:cd:c7:8a:09:1f:4c:6f:8b:f1:
                    91:f7:19:76:34:9a:cf:ef:be:91:2b:76:92:b1:42:
                    c7:38:2a:a3:f2:07:1f:de:da:24:5b:78:87:7e:67:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:9D:C6:D0:4B:8D:9C:B3:28:8D:91:E0:0C:2A:37:F4:E7:D2:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/960fe7df-e5b2-38f0-9edd-b93abf137ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:d3:bc:a3:88:c5:d1:50:42:ab:e3:b9:fd:e0:e1:bf:35:10:
         08:f6:5c:32:66:18:5b:ba:5d:d3:f4:7a:7b:9e:64:14:9c:4e:
         3a:32:19:49:e1:bd:9a:17:07:ff:b3:ea:9e:01:ec:b7:5d:f4:
         6b:57:4f:33:cc:c5:8b:21:f2:4a:63:f0:53:18:83:96:7e:66:
         df:bd:f4:6d:d9:15:43:7f:0f:9d:fe:75:b8:66:45:78:9c:9e:
         f6:05:ad:41:b4:b0:22:9f:03:6f:12:5e:0c:fe:0b:45:56:de:
         a2:8f:ca:d4:bc:02:d6:1a:77:cb:28:d9:60:e6:b8:be:c5:e1:
         07:6a:6c:4c:38:ce:bf:bd:be:07:79:a6:e9:be:fd:05:60:89:
         61:1f:ff:e3:91:3b:ed:56:33:ba:0d:f6:fa:0b:96:c8:06:6d:
         a7:1f:28:8d:4d:75:f6:e4:10:8d:ac:a7:b6:c1:15:da:7b:ca:
         57:be:a1:eb:1d:ff:3e:4a:8e:47:90:90:8c:96:e2:89:bb:80:
         e9:01:f2:ab:94:a9:88:25:d0:27:3d:27:4d:e4:f6:06:10:bf:
         54:da:30:95:84:c4:56:e9:8f:95:01:e0:3d:a4:d6:dd:6c:64:
         03:92:0b:ac:ee:8d:7a:e0:0a:56:19:2c:70:2b:5c:90:da:58:
         71:0c:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:28 2025 by rpki-client