Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa
File:                     b818da63-b5bf-3282-a0d6-062f6b347687.roa (raw, json)
Hash identifier:          bDKA1x7cdFKZXvyHRwAyl08tDksWhakFgCVd45aeyOo=
Subject key identifier:   B6:EC:C0:24:72:3A:FE:CE:15:4B:9A:79:E4:39:20:9D:86:C9:43:0B
Certificate issuer:       /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial:       010D0C9F4328584A093AA0249BA809F7E38BE280
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     35908
IP address blocks:        174.139.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a0:24:9b:a8:09:f7:e3:8b:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=c852f361-1c7b-4b58-8617-83ac35f9a703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:c8:d8:b5:26:25:ef:c0:c8:f7:31:ca:a1:
                    24:66:fb:06:77:44:c6:aa:fb:fe:ab:0a:eb:00:10:
                    95:87:18:4e:31:ac:e1:ab:de:ed:1a:a8:17:21:ba:
                    52:e2:09:3f:4d:6f:49:f3:d4:ed:c7:57:f4:cf:7b:
                    ed:36:09:9f:68:5e:57:85:7f:b3:41:71:eb:da:a3:
                    5d:e8:ee:1f:5a:ae:32:7d:1f:9e:7d:b8:79:63:c4:
                    d7:23:60:bc:79:a1:f3:13:a3:06:67:35:a4:c2:87:
                    69:e1:1b:78:24:c3:1b:49:38:00:14:cd:4d:b3:8e:
                    b5:d6:e2:6e:2e:2b:4d:c2:23:72:19:d1:0a:0c:69:
                    01:fc:e1:8b:f7:e3:22:9e:35:08:ca:a6:5b:4b:90:
                    f5:3c:ee:e2:3d:02:69:5c:d0:55:ac:72:72:18:16:
                    de:56:67:5d:c3:d0:ed:8c:e1:3f:1d:5f:20:92:74:
                    1b:5c:0d:22:b5:46:68:7a:d8:37:c8:62:9d:92:24:
                    88:45:5f:83:6a:5e:a0:61:d4:96:fa:58:29:43:d9:
                    5f:c6:e1:df:0d:be:88:d3:4e:84:b4:5f:cd:ab:c4:
                    f1:55:a4:04:6f:2c:b0:39:e1:12:2f:30:1d:d3:0d:
                    f2:c6:57:f6:78:83:f3:60:2f:1b:0f:49:66:6b:c9:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:C0:24:72:3A:FE:CE:15:4B:9A:79:E4:39:20:9D:86:C9:43:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl

            X509v3 Authority Key Identifier:
                keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:3c:ac:5e:d1:3a:d9:15:30:17:f0:a5:48:16:54:a6:e2:
         66:19:8a:1e:21:d8:49:48:07:7b:dd:f9:f6:58:8f:f9:fd:07:
         2f:e7:62:2e:b4:eb:7c:c4:7c:6a:77:ee:d0:1c:e5:91:74:fb:
         2c:09:28:53:b8:9a:f0:4a:f4:13:c5:81:a4:8c:99:92:59:14:
         36:1a:50:cf:29:39:d3:88:e7:72:c3:8e:a7:dc:59:ec:63:15:
         d5:be:a0:62:77:c5:5c:32:6c:e0:45:b3:50:77:d4:53:b9:10:
         18:da:92:2a:87:88:2b:7d:95:8c:a3:b9:a0:cd:48:ee:84:84:
         52:5a:89:b1:40:fb:54:b2:93:7c:ae:d5:ec:89:16:ed:eb:e5:
         84:d1:f3:5b:ba:68:d9:15:5a:86:06:9f:a5:e5:4d:76:43:10:
         a5:f3:50:31:c3:44:52:25:1b:f1:a7:60:a2:52:c8:2e:a1:d9:
         5f:30:34:49:85:05:a0:2a:43:2f:c2:0a:0d:6c:da:2b:9a:04:
         85:6e:2c:bb:a5:c0:b0:74:f4:8d:55:3a:d0:c5:ca:94:b2:35:
         34:65:63:c9:9b:5d:ff:a2:5f:23:aa:5f:ac:a6:c2:bb:5d:e1:
         0b:1f:ab:2c:c6:1c:c3:36:a0:76:17:67:30:ee:84:7d:3a:59:
         ff:76:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:25 2025 by rpki-client