Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/8a633a76-3d36-353c-9a8e-b1cd662f7292.roa
File:                     8a633a76-3d36-353c-9a8e-b1cd662f7292.roa (raw, json)
Hash identifier:          4Q5dbfEu1FqwYm5g8O3XTBnUNMAnaKEtrb3hoTUAC4U=
Subject key identifier:   93:51:1D:5D:5E:69:B3:BA:BA:CE:A8:0A:8C:6E:A7:B1:AB:CB:FC:6F
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584AD3A12A6E12C1C677813CE630
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/8a633a76-3d36-353c-9a8e-b1cd662f7292.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     395028
IP address blocks:        205.157.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:2a:6e:12:c1:c6:77:81:3c:e6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=981c1ee0-2293-4ba6-bcde-c286d2616dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:f1:93:04:fe:a1:fc:63:e3:a4:a5:f8:ce:
                    f8:d9:b7:a1:31:60:e1:00:83:ef:ab:b4:ef:de:73:
                    ee:63:c3:ed:ae:9c:25:46:f3:94:dd:92:23:b4:a5:
                    40:56:ae:66:9c:eb:73:b5:11:fa:77:79:aa:b9:4e:
                    cd:6d:a8:3d:7a:96:1d:97:43:16:f9:14:1a:dc:68:
                    af:5a:53:0a:19:00:ba:ce:03:c0:f4:86:eb:a0:b3:
                    3c:05:59:22:29:bc:24:47:ea:91:df:8d:e5:8b:89:
                    f4:26:cd:a8:18:77:5b:b2:c8:71:ce:1c:cc:e0:62:
                    f7:a1:55:4c:12:de:fd:3b:c3:8f:aa:1d:69:4f:fd:
                    7a:b8:c8:7f:d0:e1:e9:7a:e4:b8:4c:2c:34:54:f8:
                    77:72:a5:cc:a4:ee:d8:9c:6b:7e:a6:ed:ec:8f:78:
                    e5:b9:b5:71:1f:ea:62:48:1d:6e:db:26:3c:5f:3e:
                    34:ea:a3:c7:a2:68:1f:c2:11:c6:42:c5:84:27:1d:
                    15:96:ba:41:5e:c8:e4:c5:33:4c:03:fb:7f:c9:54:
                    b8:8d:55:65:de:dc:49:fa:41:ef:09:46:4e:3c:79:
                    c1:36:54:05:e3:c4:52:03:99:c7:ba:30:be:fd:96:
                    08:02:5a:e2:7a:88:0a:60:1f:61:e2:9e:ed:93:1d:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:51:1D:5D:5E:69:B3:BA:BA:CE:A8:0A:8C:6E:A7:B1:AB:CB:FC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/8a633a76-3d36-353c-9a8e-b1cd662f7292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:85:c3:c9:51:7d:49:6e:39:a1:f5:3e:62:59:a6:bb:97:59:
         9a:87:2d:d7:69:29:54:b1:0c:28:00:c3:74:6b:0f:03:21:d3:
         df:98:09:40:5c:73:5b:8c:3f:09:9f:d6:6f:32:8f:91:b1:bf:
         c0:1f:5d:ae:8c:cc:06:2e:49:cc:55:43:65:da:0d:f6:08:ec:
         52:38:31:ef:0c:07:62:3a:36:68:94:6c:ee:bf:52:3d:36:1d:
         0a:7f:a9:74:de:d1:0f:99:a2:ff:72:80:39:da:a8:d1:3c:af:
         fb:1f:41:38:1c:39:45:78:0c:a6:40:d3:0b:49:06:0a:fc:da:
         84:d2:74:19:05:61:57:5e:7b:24:8e:b5:b1:cf:a9:fe:b5:7a:
         08:f9:7b:d4:aa:d3:d2:ab:39:5f:5b:9a:f6:bc:16:52:5a:32:
         f0:db:7e:0b:d7:1c:bf:2a:40:5e:43:81:8f:52:77:3a:d5:42:
         49:4b:35:ef:81:ed:90:f9:70:70:8c:c0:3d:64:8f:35:0b:2a:
         8c:6c:9a:8d:1f:bc:0c:90:25:93:54:f2:7b:8d:55:77:01:98:
         fb:22:f0:e3:08:0f:42:f2:72:31:5f:a5:38:b8:c3:8c:c8:24:
         51:17:0e:15:2d:14:3f:55:09:7a:74:bc:cd:69:b0:7c:1a:75:
         69:00:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:45:54 2025 by rpki-client