Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
File:                     40a3da2d-d51c-3714-9f44-526748cc77d7.roa (raw, json)
Hash identifier:          s5d+283D7cN2HbzO7wCGjlRm0PnwyE2yxCMdHpzXv7s=
Subject key identifier:   37:91:87:E2:6F:9C:E6:72:E8:71:13:DC:96:BC:E0:18:64:8F:07:36
Certificate issuer:       /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial:       010D0C9F4328584A655B29C6781A534A8556F780
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     13875
IP address blocks:        204.235.252.0/24 maxlen: 24
                          204.235.253.0/24 maxlen: 24
                          204.235.254.0/24 maxlen: 24
                          204.235.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:29:c6:78:1a:53:4a:85:56:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=6b4bfc6c-b419-4c62-9964-3cb89f8845d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:6a:0b:20:23:d1:4f:8f:05:17:76:ad:f5:
                    bd:ef:b7:ba:10:a3:45:7d:11:8b:6a:ab:e1:94:48:
                    67:6c:28:37:02:3b:c7:b2:d6:0b:bb:d1:b5:b7:41:
                    22:76:1f:e5:4b:94:91:6d:13:8c:35:05:79:cd:3c:
                    86:65:71:0f:64:d8:66:31:f5:9c:95:a4:e4:15:54:
                    0b:d3:e0:56:fd:a4:4a:dd:03:a7:c7:8e:71:57:04:
                    ed:85:78:77:f9:89:a6:e0:36:ac:4d:00:d9:51:c5:
                    c7:2a:16:cf:7b:4d:12:56:4a:e1:5b:56:d6:12:b3:
                    26:4e:30:52:3d:30:48:ca:53:dc:52:fd:b0:78:d2:
                    40:fd:ef:ff:81:57:fe:74:51:42:7e:84:d6:93:be:
                    7e:c7:d5:c1:82:4a:73:25:78:12:f2:de:19:ce:80:
                    69:e3:d0:e1:37:13:29:51:13:62:bf:4c:83:73:0b:
                    3f:c3:ea:cd:ba:9a:8f:d3:db:17:30:ac:bf:3f:c2:
                    db:eb:67:c2:bc:e3:6b:52:f0:55:69:bb:ef:5f:0c:
                    0f:a3:53:c0:9b:b9:1a:28:32:99:2d:bb:82:e7:14:
                    f4:97:df:c2:9b:73:5d:c8:d4:20:87:28:96:53:c5:
                    ac:33:44:4f:02:d2:5a:f0:a1:69:5e:b8:0d:90:bb:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:91:87:E2:6F:9C:E6:72:E8:71:13:DC:96:BC:E0:18:64:8F:07:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl

            X509v3 Authority Key Identifier:
                keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:15:ac:ff:2b:f3:e8:34:79:a6:31:59:d5:61:3e:00:8f:
         ba:0b:f4:04:d1:eb:dd:38:ff:bc:1d:26:f8:b4:51:5c:ff:89:
         2a:d6:84:59:e4:39:ae:b5:b9:d9:ac:6b:71:b7:ec:80:bb:40:
         92:89:12:a5:bc:4b:1a:c7:63:98:46:2e:7b:e0:a1:50:d0:91:
         1e:05:48:64:e9:61:a0:e2:d1:73:f0:27:80:f8:83:7e:1a:fa:
         d3:d0:47:27:d6:92:c4:5d:a8:2e:af:90:0c:ad:1c:b0:21:d3:
         29:1c:fe:aa:07:37:fd:54:a1:e8:35:49:33:c4:89:28:1a:7b:
         8d:93:2a:20:6d:04:e9:83:2c:9d:cc:a3:41:b8:d4:21:12:1b:
         06:b5:7d:c9:f2:b9:7b:eb:c2:8e:ad:17:76:31:90:e3:35:18:
         4f:2e:8c:fd:61:ab:81:75:74:63:a8:aa:ac:e6:90:1c:7b:b8:
         38:ed:52:60:ef:db:75:5e:c2:43:e8:93:7f:55:f4:10:f5:2e:
         e7:05:81:c5:13:77:bd:23:a1:8f:45:0a:6f:c0:65:ad:45:aa:
         5b:49:ab:8f:18:c0:e9:2d:23:49:2e:d7:63:06:98:10:c3:08:
         35:0c:d8:83:a2:ec:d5:51:2a:05:a3:52:64:1c:c3:4a:51:0c:
         5f:5a:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:38 2025 by rpki-client