Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ff52da54-7b83-3464-971d-3fa488d617dc.roa
File:                     ff52da54-7b83-3464-971d-3fa488d617dc.roa (raw, json)
Hash identifier:          V4hpG2C9o/RvzstjO2HUHiM0f9Woxh7igk8k62hsWRo=
Subject key identifier:   99:22:5D:56:FA:18:5E:26:BB:64:30:37:52:E3:EC:06:CA:0C:71:9D
Certificate issuer:       /CN=62bab34c-4821-43e9-b275-c29729ce9c1f
Certificate serial:       010D0C9F43285849F05922EDE1A258468DA05440
Authority key identifier: A3:10:DD:04:2F:3A:3D:59:7F:76:23:79:FE:15:79:2B:77:45:EB:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ff52da54-7b83-3464-971d-3fa488d617dc.roa
Signing time:             Thu 22 May 2025 15:07:26 +0000
ROA not before:           Thu 22 May 2025 15:07:26 +0000
ROA not after:            Wed 20 Aug 2025 15:07:26 +0000
asID:                     16794
IP address blocks:        162.253.204.0/24 maxlen: 24
                          2602:809:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:59:22:ed:e1:a2:58:46:8d:a0:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bab34c-4821-43e9-b275-c29729ce9c1f
        Validity
            Not Before: May 22 15:07:26 2025 GMT
            Not After : Aug 20 15:07:26 2025 GMT
        Subject: CN=8609b516-0cc3-4824-8d38-71af720f0166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:85:19:d9:55:c2:5e:f0:63:b4:84:16:03:
                    12:b6:10:f4:3e:33:58:a8:f1:7c:15:7c:bc:96:0a:
                    55:fe:5b:ad:97:37:59:b7:58:6b:1a:e8:80:ff:39:
                    78:68:83:7e:cd:07:4e:f8:7d:f8:4f:0b:60:07:35:
                    f1:0d:b8:2e:9c:c3:a6:c4:80:73:f2:a5:09:89:3f:
                    1b:0f:23:cc:67:e4:3a:3f:84:02:e3:d3:01:04:6f:
                    25:f4:2e:7b:88:25:e1:dc:59:45:a2:27:bf:e4:02:
                    af:42:25:3c:55:56:4b:06:db:94:7a:fc:74:cb:14:
                    49:1e:57:89:52:69:73:bf:a0:df:28:9c:26:03:11:
                    aa:a8:68:4d:b4:e6:a5:43:84:43:cf:71:1a:55:61:
                    62:da:1c:ac:78:c2:9a:08:bd:73:d9:54:b8:e7:48:
                    4f:2b:80:f3:39:57:aa:48:d6:f7:1c:c6:8c:88:32:
                    b6:47:eb:d3:0c:a4:3f:56:bb:f0:c5:6a:74:c5:92:
                    72:ab:14:e8:ad:29:87:ff:cc:e1:5c:fc:53:7d:c9:
                    12:a3:dc:37:41:5c:a7:67:2e:0e:e3:bd:1b:04:70:
                    be:0c:0c:2c:53:89:4e:46:f2:b4:25:be:ff:9b:95:
                    6f:5c:65:f6:e5:6e:7c:6d:f7:8a:1e:b2:16:10:dc:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:22:5D:56:FA:18:5E:26:BB:64:30:37:52:E3:EC:06:CA:0C:71:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ff52da54-7b83-3464-971d-3fa488d617dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.crl

            X509v3 Authority Key Identifier:
                keyid:A3:10:DD:04:2F:3A:3D:59:7F:76:23:79:FE:15:79:2B:77:45:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.204.0/24
                IPv6:
                  2602:809:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:87:88:ff:58:32:90:36:b6:cf:4b:8d:ee:bc:a9:bc:0c:cf:
         0e:ce:d9:d3:37:d0:ad:0e:5c:66:0f:f7:d6:99:81:62:0c:e3:
         bf:0b:f1:60:f0:88:21:cf:b8:b1:93:b8:5f:f7:2e:5b:82:ab:
         32:b2:80:6d:ca:19:ba:42:46:94:4f:54:3c:a0:c7:4e:b6:96:
         3f:60:05:3a:d4:f6:67:d6:48:d7:5a:10:a0:1f:fd:9e:85:52:
         ff:13:a5:05:2c:65:83:72:2c:be:86:57:76:ef:42:b3:78:0c:
         21:70:4c:78:5a:25:a8:8e:f9:6c:20:6a:d5:13:9a:6e:0c:e8:
         95:c0:b8:74:e4:77:df:9d:97:84:c0:eb:51:e2:9c:5b:0b:b1:
         6a:69:5a:60:57:3e:c9:de:a5:cf:39:e3:a8:ce:a4:f5:41:b2:
         16:c0:04:bd:c3:ce:a4:d7:7e:fd:66:8d:a9:ed:09:10:f2:d5:
         8c:a1:bb:e1:65:42:b2:10:cc:b3:be:81:60:0d:74:e2:48:ab:
         b8:6e:f0:9f:3c:8e:98:72:7d:e8:e6:3f:e4:d8:9f:fd:a7:16:
         0c:f9:8a:ff:af:08:fe:98:3c:5f:57:30:89:98:27:14:af:7f:
         e8:9d:44:28:73:a8:49:a1:c9:e5:3f:4b:c1:df:b8:77:6c:89:
         0b:91:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:14:56 2025 by rpki-client