Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
File:                     b7fb26c9-27d4-3d17-b963-60799756d2e8.roa (raw, json)
Hash identifier:          XSffjIaFjuRiqUdaNc0AqHPSf/YNFNgHXSW7YtBFL/0=
Subject key identifier:   4A:4C:2A:39:D5:EE:36:E0:EC:41:84:69:69:FD:86:44:91:44:6A:25
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F4328584A268AC6240CBA844E2D805700
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     6079
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c6:24:0c:ba:84:4e:2d:80:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=0b6d5e82-e8c4-4bb3-abb8-788fea0f034b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:44:7f:f8:ae:41:31:9d:d5:c3:05:98:4c:
                    79:41:e6:71:4a:aa:5a:ce:34:7d:d6:63:07:2e:04:
                    b8:14:d3:7a:07:02:6d:31:10:02:d6:fd:f7:2b:af:
                    c6:2f:bc:0e:87:1d:86:f5:3d:56:68:d1:6c:4b:3a:
                    b7:ce:47:28:9e:bb:db:cd:9e:c8:6c:d3:2a:22:3f:
                    d8:f4:ef:f7:59:a3:4f:8d:5a:59:17:a8:d2:ee:77:
                    db:71:b4:17:1e:8f:04:71:e3:c1:35:79:f6:2b:79:
                    44:7e:11:4e:29:0c:ad:4f:ec:26:40:0b:2c:f1:a7:
                    77:9b:5a:f2:d5:9a:05:01:4c:bf:a6:e0:f8:58:4a:
                    36:40:27:8e:24:75:b2:fd:43:48:83:48:fb:0c:cf:
                    82:53:f1:b7:04:38:6c:8a:0c:19:18:06:2f:e9:e3:
                    43:bc:3d:5f:6f:0a:65:26:22:fe:e5:84:01:f6:d7:
                    46:d8:6e:95:56:a2:fc:f7:d9:55:f8:6a:7d:1a:02:
                    b8:ab:57:35:41:9c:e5:39:68:81:c2:17:be:77:d9:
                    ae:43:bb:5b:95:d2:0a:1d:fe:a7:34:58:3d:2c:18:
                    c4:89:66:de:4a:c5:da:71:f6:17:0a:f4:4c:2a:8e:
                    ad:8d:a7:2b:8c:c2:32:29:9e:e9:b5:c3:ab:5a:a6:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:2A:39:D5:EE:36:E0:EC:41:84:69:69:FD:86:44:91:44:6A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:cc:3a:07:6d:fd:82:cf:d4:16:8c:10:36:79:1f:48:b5:
         f6:b6:b7:f3:42:0e:10:21:19:59:50:32:bd:81:17:af:bc:a6:
         50:d9:01:c5:74:37:a9:5d:bf:9c:47:60:d3:d9:68:f5:fe:52:
         f6:ee:d7:60:dc:6c:fd:6f:14:ff:6c:a2:31:76:40:57:ef:87:
         d6:25:e8:a7:26:5e:2e:bd:26:e7:0c:dd:16:04:cf:c3:ce:54:
         09:82:6c:31:0b:6d:3d:7d:2b:c9:94:b6:3c:5a:f1:06:1a:3a:
         e4:c3:4a:37:b8:16:14:2f:57:a1:7e:d1:03:6c:6b:e9:44:08:
         19:5b:1d:b1:cb:d9:d3:87:e9:98:0d:11:19:05:cc:62:a4:3f:
         6f:3e:69:2a:07:51:17:89:c5:c0:cf:bb:1d:2a:3d:ec:80:1b:
         ee:aa:40:11:75:b2:49:eb:c4:1e:51:0e:c8:3e:dc:09:85:45:
         f2:99:7b:76:1d:63:64:a4:00:1f:ea:69:e0:0c:e5:d2:01:be:
         30:07:cd:28:70:f4:96:49:ff:8d:0f:d6:ca:00:f9:d5:1a:0a:
         04:aa:66:b5:d4:54:ab:aa:3d:12:32:8b:83:9a:1b:b4:1f:dc:
         fe:42:3a:f9:91:bc:36:1f:2d:a5:06:80:d8:ad:58:bf:aa:bf:
         46:e2:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:42 2025 by rpki-client