Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/78bbf305-242c-321a-b929-a39338697761.roa
File:                     78bbf305-242c-321a-b929-a39338697761.roa (raw, json)
Hash identifier:          Xekgx/sjG9qax2nRRdht+QE2TwN7j76uR0b9nQE5U2o=
Subject key identifier:   50:43:AE:F4:6F:CC:5C:BF:99:60:83:7F:4E:00:42:4C:20:FE:0E:1B
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F43285849DF5A753204D90D4A4A846400
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/78bbf305-242c-321a-b929-a39338697761.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     2734
IP address blocks:        208.64.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:75:32:04:d9:0d:4a:4a:84:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=cd11959a-48ec-45ca-a8f2-378f35013156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:b9:4a:c1:e5:a9:30:31:23:97:a3:da:b4:
                    40:05:6d:53:e5:2d:e4:56:6c:2b:80:46:f2:dd:1c:
                    5b:d3:07:4f:67:f9:21:b4:79:de:83:53:ad:b1:d3:
                    21:63:1f:93:00:87:9f:36:ed:55:be:ab:e0:cf:b8:
                    24:a7:27:de:0d:58:1a:17:f1:ec:a0:73:0d:a2:ac:
                    86:eb:c2:d3:2b:69:c3:54:cd:51:d2:b2:69:08:7d:
                    6f:c8:27:dd:26:f2:ba:8c:29:96:1f:54:e9:05:5e:
                    64:56:87:f9:ef:2c:40:80:8b:90:b5:23:d0:08:80:
                    4d:4a:d7:7e:2f:de:21:73:60:35:c8:c8:94:1c:50:
                    33:e3:fd:ce:c1:37:47:d8:65:1e:ea:8c:b7:6f:a7:
                    5b:c6:30:23:7c:bf:95:2c:46:5e:67:4f:ff:b1:d7:
                    bd:fb:32:45:1c:b5:cd:91:d9:57:f4:84:26:66:d2:
                    09:1d:c3:23:60:01:74:b4:98:cc:c5:6c:52:41:e7:
                    4d:05:d7:9d:f6:f6:e1:e6:0f:a0:64:b5:21:b1:46:
                    4e:80:e5:72:01:d0:97:b0:30:e3:c6:52:09:cb:50:
                    f5:5d:44:3b:09:6f:06:87:5d:35:8b:8d:ab:49:12:
                    c7:31:67:2c:bf:54:42:0e:0f:84:47:c0:9a:12:95:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:AE:F4:6F:CC:5C:BF:99:60:83:7F:4E:00:42:4C:20:FE:0E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/78bbf305-242c-321a-b929-a39338697761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:b8:1c:5f:44:ee:66:d3:5c:56:42:2a:a2:98:82:e6:10:
         e8:6c:eb:d9:6a:dc:4f:27:25:43:95:5b:67:e7:6c:eb:c1:85:
         5d:11:16:c5:bc:e9:b5:f4:8b:4c:ad:43:bd:bb:2c:45:a2:19:
         1d:98:2f:8f:7f:a4:4a:7c:87:20:e0:0c:13:9c:c0:f1:8a:2f:
         8f:36:48:28:4c:65:f5:f6:17:ed:29:43:e6:76:79:ed:a3:4c:
         d0:7f:2e:cc:93:b4:1a:88:04:be:fd:c2:75:01:be:cc:d5:68:
         13:f5:45:40:cb:aa:7f:87:33:3b:7a:54:a8:9f:1f:ac:23:f1:
         8c:d3:7c:51:69:94:09:6a:02:b9:d7:33:9c:eb:64:7b:7f:95:
         b4:7e:d8:15:42:f4:75:26:b5:f8:ef:4e:f9:17:34:75:c6:1e:
         17:e5:3a:e5:0f:ac:45:93:02:da:d7:ab:6b:ec:9f:c8:29:db:
         48:b9:56:38:16:84:e1:cb:70:1c:2b:d6:23:ca:07:82:2d:cd:
         3e:b5:7b:8a:44:52:cf:f5:77:7e:32:a5:29:14:2e:3a:74:0a:
         fb:6e:a3:bd:90:05:b6:f9:b6:6a:88:9e:fd:2c:9f:12:13:ea:
         ab:83:ab:9e:05:26:5f:6c:f2:57:b0:a4:9d:ad:65:65:0b:66:
         03:37:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:00:21 2025 by rpki-client