Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
File:                     e3039b73-c17c-3972-b068-a15a1e8b7670.roa (raw, json)
Hash identifier:          Ets7c5vTgg0dkz70Hdqf0UFkxLfLeBRHbOyD53eaduk=
Subject key identifier:   B2:83:B8:B1:1F:87:28:A2:44:F3:E2:3C:23:91:34:A6:A0:F8:0C:97
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849D594E192D4118B266199C580
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        208.127.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e1:92:d4:11:8b:26:61:99:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=aa4bd75f-17d2-4ba2-8f83-5451e157a726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:c0:90:a2:3f:91:e4:48:2f:8a:bc:99:a3:
                    fb:25:98:28:f4:be:6a:99:a5:3b:b5:8f:51:33:bd:
                    4c:7d:b0:20:1e:c0:92:11:ca:1c:f3:10:25:13:c6:
                    e3:bf:63:e5:da:46:5e:44:ff:c2:58:d1:cb:dd:6a:
                    17:0a:46:63:8a:8d:0c:ed:c0:80:17:cb:9f:3c:90:
                    32:4f:7a:97:3f:88:31:77:20:19:83:05:89:62:ba:
                    9f:3e:eb:2f:44:ba:83:74:15:46:b1:8e:be:c3:81:
                    f2:a6:fa:dc:76:a4:75:6d:74:88:0e:ee:fe:8f:0d:
                    43:bf:a8:ad:21:6b:4d:35:b7:1d:14:b5:29:f8:d4:
                    4d:bd:81:88:b6:91:18:65:0b:de:bc:3c:57:25:82:
                    b2:28:a9:fc:36:e1:65:f7:dd:58:18:c8:82:2e:1d:
                    92:95:18:86:77:b1:bd:99:7d:64:ce:89:b9:ca:0e:
                    5c:24:9a:26:76:24:80:ff:68:8a:71:73:85:69:28:
                    59:49:89:11:ce:14:35:b0:54:f6:43:e8:a9:6e:9c:
                    37:44:5d:77:58:7b:35:99:26:55:a0:b7:fb:04:93:
                    c6:2d:0e:f5:c1:ba:ff:da:3e:b9:a5:81:a2:d1:96:
                    63:58:ff:dd:13:5f:cd:70:a5:08:a2:ce:06:65:ca:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:83:B8:B1:1F:87:28:A2:44:F3:E2:3C:23:91:34:A6:A0:F8:0C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:36:78:b9:0f:24:46:b8:1d:5f:9a:5c:41:42:26:9f:aa:53:
         7c:bc:bc:f4:19:2d:fa:4c:a4:db:3c:a1:cf:a3:2a:b5:fd:8b:
         70:93:c4:3f:39:e4:ac:99:82:e0:e6:b0:0f:00:ed:74:ed:92:
         bc:6e:29:83:09:90:88:69:60:7b:cf:4c:c6:a1:0f:54:6c:10:
         6e:e0:70:7f:cf:f5:a0:0a:a1:bb:15:01:92:7c:f5:f9:c5:dc:
         1c:1e:0a:f9:80:6b:ba:9d:5d:dd:3e:be:a5:c9:bb:8a:25:c0:
         d1:48:29:b6:f8:a7:be:8e:da:ca:e9:c9:58:11:e6:e7:39:1a:
         68:a2:c5:92:93:ce:a8:65:23:e4:59:ed:4a:ca:09:3a:aa:23:
         73:56:32:53:c1:c8:16:75:f6:2b:38:72:d5:c9:9e:3a:ad:c7:
         e9:ee:0f:70:25:2b:d4:a5:24:f0:7f:ce:8f:47:f8:ee:b4:37:
         ce:9d:eb:1d:75:53:96:33:d7:e3:e1:c4:b1:e1:ca:1f:db:3a:
         cf:66:25:f2:81:89:e3:02:a8:b0:b4:1a:e1:f8:e7:f5:8c:da:
         8f:3d:49:e0:c3:1a:34:25:6b:10:56:7a:81:6f:4b:be:e0:01:
         a7:73:2b:64:a6:d3:b5:56:64:88:f6:c6:24:c4:e2:12:7b:2d:
         d6:58:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:37 2025 by rpki-client