Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa
File:                     0254b60b-a409-3e5d-beee-47898507d1b4.roa (raw, json)
Hash identifier:          83vqzuNdo6nDV9pV1gkkrTOlP0Mx1CnBgBdKRazaNlU=
Subject key identifier:   67:91:0E:7D:86:A5:D9:12:17:7C:D0:63:78:E2:CA:4A:5D:D0:47:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AF256A6D6A712A552DEA78800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     3855
IP address blocks:        199.172.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a6:d6:a7:12:a5:52:de:a7:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=9ebfc6ae-4b51-45f2-8054-b59d791d5175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:72:37:37:47:a4:64:44:39:7e:82:fb:72:
                    a6:72:d2:44:26:41:6c:8d:39:4f:85:60:4f:86:3a:
                    13:90:31:e2:ef:2f:be:cf:73:32:da:ef:52:b8:a1:
                    25:4f:5d:10:b2:11:dd:2d:82:dd:df:c0:35:fa:13:
                    d1:b8:3b:e9:7e:03:47:35:66:f3:b0:c7:54:ee:35:
                    aa:62:9f:49:33:be:a4:e2:f7:9b:67:b1:bf:2c:ac:
                    24:6e:c8:bb:3a:e3:4e:f9:bf:1c:24:3a:09:e1:b2:
                    8a:11:f0:49:12:28:32:63:2c:53:0e:ee:c7:62:b5:
                    10:2d:26:b0:d7:b5:41:f5:38:36:60:c6:56:61:9e:
                    8b:10:20:75:87:bb:38:1c:83:54:e0:05:db:b6:42:
                    b0:0e:c3:87:6e:69:2f:f3:8c:fc:a9:9e:d8:cc:4e:
                    e3:b3:a0:46:95:49:56:7d:2a:00:19:35:44:3f:c2:
                    12:48:1b:ac:40:f5:2f:9a:5c:33:c1:bb:59:5c:b2:
                    f4:12:97:38:79:c9:ed:ce:fc:0f:bc:5e:45:aa:75:
                    71:9b:8b:4f:ba:42:b4:a4:b4:d3:ff:22:e9:5d:54:
                    d5:03:b3:5d:61:6f:52:2a:b0:84:ef:2e:5b:99:5e:
                    53:a2:5f:58:0a:2b:01:3d:dd:71:f8:23:d2:ac:30:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:0E:7D:86:A5:D9:12:17:7C:D0:63:78:E2:CA:4A:5D:D0:47:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ca:b0:1b:f2:5d:be:cb:24:8a:5e:1d:0f:7e:bc:ce:b3:fb:
         e5:00:3d:10:9a:25:9e:fb:05:ab:73:77:95:b7:11:f9:32:cf:
         53:cc:9f:d2:30:36:4f:c6:f1:2f:77:eb:88:8a:80:9d:a0:4f:
         86:1d:f9:f5:58:5e:fe:4c:0f:83:28:93:20:ce:69:fc:51:b7:
         29:69:2d:42:cd:23:cd:e4:ef:72:4d:da:87:96:50:03:75:bb:
         76:a8:f8:93:e3:fd:91:46:86:c1:08:aa:eb:54:b4:85:32:43:
         24:86:c1:84:a7:11:ab:d7:b4:17:09:11:da:d7:bd:51:03:24:
         3a:96:74:5c:b1:d3:e7:19:65:d9:cd:3e:20:b9:d1:a3:25:b6:
         0d:a1:40:c7:08:94:c9:8c:6f:97:3c:8b:64:a9:6e:81:37:65:
         79:3b:92:b4:4f:ac:00:3d:27:36:47:c3:bd:eb:33:6e:56:d1:
         ec:e6:51:9a:4c:97:7a:82:63:d1:34:08:85:e0:c5:5e:5b:18:
         7a:fe:0e:71:fa:95:5e:58:d4:ed:4f:24:c0:df:c0:44:f9:b7:
         52:c5:d1:83:fe:95:9b:4d:a4:14:3f:8c:ca:99:05:02:c6:c7:
         da:f8:04:62:75:4e:a2:83:ff:72:21:76:33:f6:c0:c7:3b:b7:
         c9:d4:f7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:31 2025 by rpki-client