Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa
File:                     c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa (raw, json)
Hash identifier:          /XbWgMqyCFuY1tmQNeRzauzUMexk1phK8zZixf3SYQQ=
Subject key identifier:   AA:6C:55:E0:87:21:A0:43:C9:AA:90:B2:B8:7D:68:2A:9B:58:EB:13
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584B27617D07B1F1472E6EA15780
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     19637
IP address blocks:        192.19.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:7d:07:b1:f1:47:2e:6e:a1:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=a1969e7d-a1aa-47b4-b2ce-330c7b90b582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:39:be:ae:9e:29:23:6f:32:be:f8:1b:c8:
                    5f:a7:a2:d5:24:66:c4:63:e7:0e:4d:da:4a:78:83:
                    5b:14:4d:74:fc:91:42:96:53:86:a9:07:c1:9c:b1:
                    51:9f:aa:ea:ac:6b:dc:21:f5:09:f4:98:a2:77:f9:
                    cf:70:b6:30:ef:c3:cf:da:4e:43:21:08:3f:90:7e:
                    47:ba:f3:06:68:81:60:57:33:81:c7:ba:ea:63:c6:
                    ab:b9:c9:35:0e:20:a4:39:21:c6:17:bf:dd:23:db:
                    9c:67:57:bf:10:9a:7b:70:91:ab:53:eb:da:98:64:
                    8b:49:f5:3a:11:5c:34:e6:f3:3f:96:63:36:76:08:
                    9d:0a:36:ee:05:cf:12:1f:cd:de:65:3e:d2:86:4d:
                    2b:12:8c:89:82:0c:b4:99:1e:fb:17:f4:51:12:5b:
                    c6:99:50:85:df:af:8d:b4:f3:63:f9:1c:03:76:3a:
                    69:b9:9a:30:70:c7:16:de:e9:6a:a2:4e:a1:bb:a9:
                    16:96:95:64:a1:9e:89:21:77:4b:5b:c8:ba:95:e0:
                    9e:82:ed:da:69:76:4c:b6:da:2f:5a:41:77:77:fb:
                    4f:cf:da:9f:32:57:37:6f:4e:21:d1:68:76:9c:0b:
                    4b:70:24:40:29:99:f6:d8:2a:7f:ae:25:cb:f8:4e:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6C:55:E0:87:21:A0:43:C9:AA:90:B2:B8:7D:68:2A:9B:58:EB:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:49:9c:c0:c8:48:33:90:c2:fe:a1:2e:a9:62:99:55:61:
         e4:2d:0a:b5:4f:85:b1:13:24:a7:1e:c4:c0:91:1c:cd:fa:6c:
         48:17:8b:8e:3a:a9:29:43:fa:58:86:37:ea:63:99:e8:d9:68:
         6e:6f:61:43:73:bb:0c:a3:30:b9:a4:23:c1:6e:1f:6a:f2:a9:
         a6:da:d4:d6:bb:72:b5:b7:cc:92:49:a1:dc:01:a2:0c:94:27:
         7f:80:39:d1:37:b8:c0:4f:08:09:dd:8e:c4:cd:fb:0e:e6:50:
         f0:dc:a3:42:e3:ec:e6:38:32:9a:ac:85:0b:ed:88:88:75:79:
         8a:bf:b5:4e:85:9a:90:d0:f2:a9:29:2c:20:8b:1e:b3:8a:a8:
         8e:13:ea:6d:9e:86:9e:71:75:74:f6:38:fc:7f:50:aa:ed:b8:
         e2:99:f0:17:66:98:3f:57:da:15:03:1e:45:d7:da:2d:4a:9d:
         7b:e2:4e:49:b5:fd:99:29:d4:4a:72:4f:29:50:09:4f:9b:7e:
         3a:74:02:d3:53:c8:2d:03:fc:64:ce:67:e0:f7:95:19:ef:95:
         41:47:d4:21:5b:3c:45:44:16:61:8a:51:32:a6:29:5d:7c:01:
         43:ee:03:4a:1b:a3:04:d0:6a:5e:3c:7c:55:22:70:1f:d3:5d:
         43:55:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:31 2025 by rpki-client