Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa
File:                     ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa (raw, json)
Hash identifier:          uvryf/01zS4Q82b8YIqU2AY/l+rKSEZryj48nQZIgAw=
Subject key identifier:   A3:C6:E4:FA:63:59:32:99:60:0B:A2:5E:32:DF:97:92:A2:30:50:1B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC016312CF749600B18AE32D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     213120
IP address blocks:        199.46.32.0/24 maxlen: 24
                          199.46.33.0/24 maxlen: 24
                          199.46.34.0/24 maxlen: 24
                          199.46.35.0/24 maxlen: 24
                          199.46.36.0/24 maxlen: 24
                          199.46.37.0/24 maxlen: 24
                          199.46.38.0/24 maxlen: 24
                          199.46.39.0/24 maxlen: 24
                          199.46.40.0/24 maxlen: 24
                          199.46.41.0/24 maxlen: 24
                          199.46.42.0/24 maxlen: 24
                          199.46.43.0/24 maxlen: 24
                          199.46.44.0/24 maxlen: 24
                          199.46.45.0/24 maxlen: 24
                          199.46.46.0/24 maxlen: 24
                          199.46.47.0/24 maxlen: 24
                          199.46.48.0/24 maxlen: 24
                          199.46.49.0/24 maxlen: 24
                          199.46.50.0/24 maxlen: 24
                          199.46.51.0/24 maxlen: 24
                          199.46.52.0/24 maxlen: 24
                          199.46.53.0/24 maxlen: 24
                          199.46.54.0/24 maxlen: 24
                          199.46.55.0/24 maxlen: 24
                          199.46.56.0/24 maxlen: 24
                          199.46.57.0/24 maxlen: 24
                          199.46.58.0/24 maxlen: 24
                          199.46.59.0/24 maxlen: 24
                          199.46.60.0/24 maxlen: 24
                          199.46.61.0/24 maxlen: 24
                          199.46.62.0/24 maxlen: 24
                          199.46.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:31:2c:f7:49:60:0b:18:ae:32:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=e0654a7c-4c35-47bf-9381-fceafa167fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:6b:9c:4d:53:29:f5:db:dc:22:11:b3:0f:
                    b1:4c:91:1d:5d:07:ac:4b:5e:d5:31:23:16:26:e6:
                    ba:b7:d5:11:60:60:27:0b:c5:e6:1c:3d:35:ac:ca:
                    e2:02:b7:0b:10:d8:56:8e:27:17:44:29:25:14:f9:
                    e8:3e:2b:0e:f7:4a:e0:a8:45:6b:42:17:c5:2f:4b:
                    31:f6:53:bb:c8:f8:5b:e0:2f:db:d6:cd:5a:da:37:
                    e8:01:22:ac:00:50:57:b0:e6:af:5f:e9:cc:f1:54:
                    cb:28:2b:77:1e:47:30:68:fa:ab:26:ee:44:af:1f:
                    28:5c:d7:a9:ec:fd:77:64:b1:3d:d4:5c:8e:14:6d:
                    d9:3a:eb:1e:04:85:48:6f:1e:40:6d:39:3f:cc:cb:
                    c4:51:1b:5c:37:f6:11:a7:e0:7c:68:42:65:97:e3:
                    b0:a4:f5:f2:a4:48:04:dd:9e:82:4f:10:ef:b6:58:
                    74:e2:f9:1f:07:0f:43:3e:dd:68:de:91:a1:22:78:
                    6b:93:51:71:0e:e5:2e:5e:9b:13:24:d5:bf:9e:51:
                    32:c9:79:27:ef:c3:95:3f:86:5e:5e:72:dc:b7:cc:
                    b2:ae:ba:31:7e:af:f7:82:1b:5e:c7:43:60:38:99:
                    0f:94:3d:cb:f8:70:d1:f5:e1:d0:8a:93:67:41:0f:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:E4:FA:63:59:32:99:60:0B:A2:5E:32:DF:97:92:A2:30:50:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff8fb462-3398-3da6-a21d-5fffe9839f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.46.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:9f:9f:fc:f1:4a:c3:92:23:bc:74:37:bf:5e:a3:f1:35:
         7a:a6:b1:4d:8c:72:a6:38:f9:0d:55:0b:6f:e0:ef:e4:42:4d:
         14:bc:43:55:1b:a2:40:77:dc:07:35:ac:50:dc:a5:cc:fc:0e:
         63:f7:f1:6e:14:fc:8a:81:8a:5c:9d:4e:aa:44:df:82:b9:5d:
         91:5b:b2:9f:2e:86:e8:68:25:be:40:64:a8:13:f6:cf:72:c0:
         ed:af:e9:d7:7c:ae:ee:12:18:66:a3:e1:f1:18:f5:b0:3a:35:
         63:6d:4f:b7:00:d5:a7:11:c3:4c:8f:73:ba:bb:d9:74:eb:82:
         55:2b:34:35:b1:6a:82:b6:19:f7:cf:18:62:c6:df:94:22:4b:
         48:47:93:f8:31:28:de:6b:60:e8:6a:68:90:2b:62:f3:ce:41:
         a4:fd:f7:c0:f0:08:8a:d1:03:39:1c:21:9a:11:57:2d:66:68:
         eb:d8:4f:12:5f:20:70:3a:3a:64:16:35:ec:63:30:ae:b7:8b:
         d7:d0:db:70:da:6e:00:a0:0d:19:46:a9:92:2c:03:6e:3d:3b:
         28:d5:84:48:69:f5:d2:0a:ea:1e:ac:bf:f8:08:f0:29:09:91:
         eb:fa:94:1e:87:d8:cf:49:d1:1a:f0:a9:0a:fb:11:a2:89:79:
         3f:9e:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:52 2025 by rpki-client