Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
File:                     6f2a8979-499b-3861-8229-f7dcb3b30854.roa (raw, json)
Hash identifier:          tlm3p22SNeW/B9Lr2H62Syu+k96Mpht/5GnKCU0Kb4Y=
Subject key identifier:   DC:77:13:16:10:A2:7F:9A:D9:B6:0D:FB:35:E8:AE:96:BB:86:37:52
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584AF0F149C15A766DCFDBC6CC20
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     30607
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:49:c1:5a:76:6d:cf:db:c6:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=b3899b68-970a-4a15-a36b-6614ea6dcf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:1c:f4:61:71:5a:2e:69:5e:70:4e:75:49:
                    dd:de:1d:d0:92:7f:94:2b:30:ef:b6:2b:89:5d:0f:
                    1c:32:a3:36:7d:8d:f6:bd:ea:3e:46:8c:d9:5b:93:
                    e3:1c:f9:0d:f8:7f:58:5a:4d:7c:d2:a3:30:d1:eb:
                    0d:3a:58:40:1d:25:7d:2a:e9:62:8c:f8:a3:b1:f7:
                    a8:42:9e:9f:3b:73:c2:12:b5:4a:5f:86:41:8a:bb:
                    70:b6:75:9b:a2:fc:10:d0:08:4d:8a:6c:6e:a4:07:
                    d6:75:b0:9b:e3:8f:7e:83:c4:7c:7d:51:69:97:b0:
                    e5:bf:af:97:9b:8c:0b:5c:9e:85:dc:00:8f:08:8a:
                    09:cb:10:c1:39:9c:65:2b:c7:10:45:69:9f:48:65:
                    77:91:24:3d:07:82:2c:9a:b2:7f:0d:d0:e5:44:8b:
                    d7:b8:43:cf:99:3a:96:04:2c:3e:a9:24:8d:4b:53:
                    ab:42:d4:4e:99:8a:77:2e:6a:68:03:c1:af:66:1f:
                    08:e3:cc:59:06:2e:7b:e2:76:ce:71:c4:ac:10:58:
                    c8:d1:1c:0f:05:be:0f:5f:67:50:61:2f:60:f9:25:
                    dd:2c:32:c2:65:84:81:06:16:c0:b4:7f:3e:5c:04:
                    f8:2d:b4:a2:4e:66:3b:06:12:1e:88:3d:9f:43:46:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:13:16:10:A2:7F:9A:D9:B6:0D:FB:35:E8:AE:96:BB:86:37:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:55:00:16:fc:86:58:27:41:eb:d5:cd:79:60:33:85:39:
         b1:ed:f5:9d:dc:98:e9:3b:d3:fa:7f:7e:3d:88:21:6c:bb:42:
         51:27:c2:69:69:e0:cf:ef:61:4f:33:9c:62:49:58:23:3a:3a:
         97:f7:c3:62:e6:b0:c6:ae:ba:9c:0f:10:2e:be:5f:9f:fd:ec:
         2d:ca:33:d5:4a:fd:19:c8:50:80:6d:b5:23:36:9e:19:a1:b2:
         f2:35:98:49:19:83:94:8c:25:d7:f4:5c:0a:7f:85:ad:dc:ec:
         71:ee:85:ec:50:5d:a0:5a:81:ae:60:6e:4a:0e:70:82:31:84:
         67:84:75:75:ef:c2:90:2c:6c:b8:64:af:15:d2:f5:c8:89:39:
         61:2d:c0:1d:42:fe:2b:a5:96:9a:9b:89:c8:1d:ed:8c:2c:08:
         9f:8c:1f:57:a5:56:60:89:81:ae:fa:14:70:d7:bd:ce:c8:db:
         af:9e:6f:65:dd:dc:08:b6:ba:3e:01:e0:4a:f8:78:b2:1f:38:
         65:8d:3b:09:cf:d9:19:3a:50:cc:05:c3:4a:69:c1:a2:c6:05:
         e0:8e:fd:e5:7e:56:ca:07:66:83:c6:99:b5:48:bc:45:3a:22:
         b9:82:fe:66:ab:fd:7c:78:ff:04:97:12:3d:73:a6:de:b3:da:
         85:e2:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:50 2025 by rpki-client