Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
File:                     1e6d92e5-d123-30be-b170-e56ac208e478.roa (raw, json)
Hash identifier:          cPvJQ0KuAEIlZS8Y+hhArpGrpPZwUQb6TTbFaBzO1as=
Subject key identifier:   CA:B8:64:B7:73:60:35:F6:21:14:3E:EB:4C:5D:06:D3:89:46:CA:6B
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584A2C20238B402F07EC22A7F500
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     20473
IP address blocks:        70.34.192.0/19 maxlen: 32
                          70.34.240.0/20 maxlen: 32
                          208.72.152.0/22 maxlen: 32
                          208.76.220.0/22 maxlen: 32
                          216.238.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:23:8b:40:2f:07:ec:22:a7:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=727f0ebf-ca3e-4858-bfec-9be6e1c96707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:a6:46:fc:7f:f2:26:f0:cf:33:6c:62:06:
                    d1:ad:ef:20:e2:4d:2f:d8:75:ad:dc:4d:d4:ca:ec:
                    b0:2e:cc:77:ab:30:29:8a:55:a5:91:28:92:e6:99:
                    ff:7e:a3:8b:39:fb:b2:a0:29:e1:c3:31:bb:40:b9:
                    8c:8a:97:3b:65:ab:f5:c9:1a:38:35:d3:c9:92:2a:
                    12:e6:e0:fc:b5:84:98:99:8d:09:33:c9:5a:34:08:
                    fe:b4:75:01:52:cf:f9:d8:5a:21:c1:02:f2:c0:f1:
                    bb:54:ca:46:5b:eb:2e:02:1b:a7:19:98:bd:7a:c3:
                    c6:bb:ac:9f:82:7c:47:ae:60:bd:f6:39:6f:cb:61:
                    d4:73:f7:73:f7:4d:28:45:b1:65:88:32:51:9c:e0:
                    99:8e:c0:f9:cd:aa:12:a7:70:79:11:ea:11:c8:2b:
                    14:24:d0:71:67:69:32:84:e7:a8:70:3d:4b:87:d8:
                    a5:e1:c1:18:35:f4:70:7a:ec:4c:04:a6:63:f6:03:
                    5e:93:98:76:35:36:06:fa:1c:1b:94:2e:33:f2:94:
                    ec:ac:05:a2:92:44:ef:28:fa:53:f7:1c:15:e9:04:
                    28:e4:ef:61:9b:76:37:8b:21:c4:0b:38:28:c1:77:
                    7e:96:23:7f:de:a5:35:1f:94:aa:7e:5a:ac:3c:62:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B8:64:B7:73:60:35:F6:21:14:3E:EB:4C:5D:06:D3:89:46:CA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.34.192.0/19
                  70.34.240.0/20
                  208.72.152.0/22
                  208.76.220.0/22
                  216.238.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:95:0b:1b:e7:24:5a:90:57:e4:45:01:56:b2:60:82:7d:d3:
         d4:a1:52:42:21:fa:03:69:db:5a:99:14:ca:6a:38:0e:65:f6:
         34:0b:42:24:f4:d9:56:f0:24:35:f5:89:ef:76:0a:7c:c3:eb:
         fe:04:c9:17:7d:02:f6:ff:33:43:94:7b:9b:4f:c7:a0:51:23:
         e3:7d:0e:1c:ec:d6:12:39:98:7f:56:d6:b1:fd:b3:7c:9e:7a:
         ca:68:90:60:af:9b:12:cb:55:0e:97:50:4a:fd:ab:e4:23:07:
         c2:69:f6:c2:ec:d6:67:94:3f:19:7c:9d:ee:2e:aa:c6:d1:0e:
         72:d8:90:8f:f9:e6:4c:8d:a1:40:4d:f5:92:0f:05:b7:05:0f:
         a4:cd:30:af:07:00:49:23:bb:23:03:b7:2e:e9:28:5d:c8:71:
         4c:5d:14:33:83:4e:b1:ba:2b:90:b6:3f:cf:f3:20:1c:77:1c:
         1f:b0:19:85:e0:30:5b:69:f7:53:f7:79:1f:9a:47:eb:9a:cb:
         d1:c4:41:d4:31:86:3f:ed:9f:05:fa:57:1e:1e:70:0c:c0:b5:
         18:39:80:4b:ab:40:ef:83:83:fc:b5:e5:66:99:86:19:a3:ed:
         6e:bf:b4:79:47:bb:61:c9:35:f9:30:bb:17:43:f6:53:ec:7b:
         94:7e:c0:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:02:30 2025 by rpki-client