Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e83a4a01-e1d8-344d-9bbd-c3f16e6249b6.roa
File:                     e83a4a01-e1d8-344d-9bbd-c3f16e6249b6.roa (raw, json)
Hash identifier:          Nz6npPucyDO8TNm5ynJ3a+nHNVYacZDgtu170wfN9i8=
Subject key identifier:   E7:8E:56:BF:EA:AF:D8:DF:E9:11:56:95:0D:91:13:C3:25:74:79:59
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A00DAB754737C6A853C0060C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e83a4a01-e1d8-344d-9bbd-c3f16e6249b6.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     20454
IP address blocks:        63.214.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b7:54:73:7c:6a:85:3c:00:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5432cd22-c642-4939-92cc-f56174623e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:cb:e4:d8:2e:ba:6a:a1:3c:59:48:0b:9f:
                    31:6a:8f:f4:1f:54:d9:9b:8f:13:f2:24:5c:80:1a:
                    84:1d:aa:77:05:d0:9e:cd:8d:20:94:85:30:eb:d3:
                    b0:93:95:8f:4e:ae:a0:d0:a0:64:88:59:f5:ca:c6:
                    3c:45:62:da:e8:10:62:4e:5f:d0:17:bb:86:ff:76:
                    cb:26:fb:1f:70:7a:96:3a:90:38:1f:b6:5e:4d:b2:
                    6a:0b:4f:5f:cf:f9:3f:9c:30:74:dc:7a:7f:a6:c1:
                    87:e3:9d:d0:92:c4:1a:e0:84:4c:e8:a4:7b:f2:bf:
                    90:54:07:47:11:0d:32:64:88:c0:40:c3:56:8c:c0:
                    d5:78:90:4e:23:4b:af:a1:17:1b:f8:50:45:59:fa:
                    24:e3:72:0f:b6:44:4b:32:c4:0d:82:b6:f4:8c:23:
                    fd:7e:59:2f:64:5b:37:99:e3:cf:62:86:ea:a5:1d:
                    9e:7a:99:76:62:57:5d:c7:8a:0b:d1:f5:7b:38:3b:
                    3b:f5:c6:33:d4:22:18:6c:80:37:97:3c:3a:14:96:
                    80:8e:b3:b1:bc:36:75:33:31:45:7d:42:65:ce:3e:
                    6e:e1:ac:05:28:c2:54:77:ae:74:6b:d6:c5:0e:c2:
                    42:21:da:99:24:94:97:18:0f:a2:4c:f8:1c:b8:ea:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8E:56:BF:EA:AF:D8:DF:E9:11:56:95:0D:91:13:C3:25:74:79:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e83a4a01-e1d8-344d-9bbd-c3f16e6249b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.214.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:65:c1:20:ae:a3:4d:58:5b:08:b0:6f:a2:64:a5:c9:1b:5c:
         34:7e:ea:03:d5:a1:44:c1:15:60:fe:49:b3:15:15:ee:bf:18:
         87:7f:97:ca:dd:76:84:3b:5c:83:6a:51:8c:1a:d7:86:26:96:
         7a:6d:4d:0b:43:eb:1f:ef:82:20:69:28:2e:4e:09:f5:f2:eb:
         b2:9d:4e:51:66:ce:61:ef:a8:a6:3e:45:39:06:88:f1:2a:ed:
         45:88:8c:c3:67:1e:27:00:04:55:24:b2:76:9f:02:d4:85:55:
         b0:3a:3f:ca:50:6b:3c:1e:5f:2f:3a:f2:4a:54:87:f9:ad:12:
         3f:92:6a:1d:3f:a4:79:3b:fd:d9:52:47:91:38:55:ce:be:c4:
         e0:6b:f7:47:ab:39:ea:da:61:29:92:76:fe:d2:41:56:ac:49:
         c5:f0:e6:ed:54:8d:a3:7c:e1:8c:37:ef:33:e1:80:70:a9:5c:
         3c:f8:19:fb:8e:90:ae:a6:e2:43:ea:5e:14:61:65:92:56:7d:
         a7:1b:5a:ca:e7:e2:c5:ff:60:4c:5b:38:63:88:76:53:71:7b:
         d1:8d:22:37:01:a3:31:07:59:a5:0f:78:59:c6:4e:95:fe:ab:
         07:70:76:eb:59:eb:6f:3a:66:e6:01:7a:04:c4:46:c3:ec:4a:
         22:df:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:35:31 2025 by rpki-client