Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa
File:                     31421922-aedf-3672-abd4-cfa24a054705.roa (raw, json)
Hash identifier:          JbkYlDAJRxvtVV4FXjDnerOjKh9tN8OJYrWEL0EGTaA=
Subject key identifier:   A0:99:A2:85:11:87:F6:16:69:47:A3:A9:A2:5C:66:2E:7F:28:BE:EE
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584B8BE22E1AE1516E13A7F82000
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     396982
IP address blocks:        192.19.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2e:1a:e1:51:6e:13:a7:f8:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=2bcc5d42-ce41-4023-bdb9-75e2ade81b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:60:03:34:23:ea:26:06:6a:58:2e:65:93:
                    94:74:c4:60:db:d1:f1:04:31:49:de:c9:ee:d7:ed:
                    d8:d7:48:60:aa:ae:3a:b4:cd:2c:8e:45:8c:8f:a8:
                    10:aa:f7:8f:f4:65:a0:86:5e:01:35:12:c7:1d:c6:
                    03:b4:3b:20:59:0f:c5:61:26:b8:7d:29:8a:41:78:
                    59:c2:4c:46:ab:ac:49:7c:a1:50:5b:2b:a5:ff:51:
                    56:6d:9f:39:7f:f5:cd:4f:87:f5:92:0f:bd:9c:05:
                    60:2a:e6:72:d7:eb:fa:d5:d1:ab:af:fb:08:ec:d2:
                    cf:96:ab:1d:4d:e6:de:e1:03:24:f8:41:61:35:6e:
                    65:3f:61:73:cc:ce:f4:8b:c9:77:9c:aa:89:e5:13:
                    d0:e5:a5:1b:55:3f:55:9b:23:50:08:db:44:fb:83:
                    09:28:bf:5b:c5:10:7e:30:58:64:db:47:9c:24:b6:
                    aa:05:f1:0c:f8:70:8e:6f:6f:d1:73:42:c9:74:e3:
                    b4:e0:ec:f2:2a:41:c4:ca:ff:cb:49:69:19:45:d3:
                    d7:85:a1:e5:d0:db:b3:35:8d:5a:d3:8e:bd:20:2a:
                    17:53:67:eb:2c:30:91:a2:ce:de:16:8b:16:77:3e:
                    07:1a:dd:ca:12:3a:0f:d6:4b:9d:76:d7:cf:a2:ec:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:A2:85:11:87:F6:16:69:47:A3:A9:A2:5C:66:2E:7F:28:BE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:82:10:9e:30:50:de:5b:16:fe:09:4d:13:c3:52:97:22:
         86:9c:b5:ba:ec:68:4d:d5:a1:1e:f2:3b:68:ad:92:55:77:aa:
         cb:ae:a6:a4:41:88:72:f4:3d:00:26:dd:18:5e:7d:9a:df:63:
         d0:d5:40:fd:9d:4c:c3:21:c7:46:30:25:26:68:94:dc:f0:ea:
         2c:32:fb:78:0a:e4:cc:75:d5:7b:7a:d4:b4:3e:38:ad:99:4b:
         14:2e:4a:3e:e9:e4:a5:92:47:33:0a:84:04:cc:31:01:a4:dd:
         4f:d7:36:e3:b3:24:5c:a2:ad:a6:d4:6c:74:3c:7a:2c:e5:cb:
         4a:e9:d6:8b:f1:c4:10:1b:38:84:c8:c2:bc:43:c5:06:7c:bf:
         d5:72:01:bc:e0:b1:17:21:97:7c:a2:19:95:99:c4:4d:f2:be:
         2d:7b:d1:fa:33:45:35:c5:ea:2f:e0:2d:91:56:da:4a:49:98:
         6e:1b:3c:31:dd:1e:49:c2:fb:3a:90:7c:5f:48:7b:3a:e8:db:
         53:20:df:2d:98:6f:c2:1b:b3:07:f2:34:a8:43:68:15:8e:17:
         27:37:98:73:8f:1a:64:b5:f0:51:f8:4f:32:05:b2:a7:9c:55:
         31:02:a4:ea:b4:69:9d:f4:36:52:13:90:36:d2:6e:d6:6f:69:
         1e:6a:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:35:10 2025 by rpki-client