Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6b51e063-6d16-3d4b-a3b6-602b5af31da1.roa
File:                     6b51e063-6d16-3d4b-a3b6-602b5af31da1.roa (raw, json)
Hash identifier:          t5PtWIy7kGFb6RTt41MyUS99Fr3zaC11xwEXkaDVHDE=
Subject key identifier:   33:A5:16:12:74:89:9B:82:FA:37:82:06:EE:4A:72:7D:19:F5:39:70
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A374AE56F813B432BDDED5300
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6b51e063-6d16-3d4b-a3b6-602b5af31da1.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11232
IP address blocks:        208.107.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e5:6f:81:3b:43:2b:dd:ed:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=73d546e1-3250-4826-86da-0943c269040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:f4:2e:e6:df:05:83:66:75:0b:d0:d2:cb:
                    ab:02:97:66:70:17:9d:6e:f4:9d:22:c4:40:d0:c2:
                    21:15:2f:fc:8a:76:92:55:8c:47:31:2a:c9:b8:65:
                    06:1c:72:3f:be:2f:04:e9:7c:b7:dc:74:0e:c8:45:
                    e1:61:af:50:dc:5c:de:16:27:1e:23:f1:7e:32:04:
                    60:d9:98:da:8c:c2:d8:4e:c7:01:20:fd:7e:81:4f:
                    46:be:e4:38:39:1d:f2:7c:34:33:74:bb:df:a8:12:
                    08:a2:78:d3:33:5f:05:e5:0a:4f:4d:7b:5d:05:b4:
                    33:97:69:15:a1:20:c8:df:69:6c:8d:8f:84:86:52:
                    f9:85:c4:3e:6c:3b:cc:76:2e:be:cc:42:7f:c4:7b:
                    55:2e:36:a6:18:fe:d6:c6:04:b8:cb:c9:d8:7b:e3:
                    f2:fa:2d:14:b6:80:93:eb:66:55:1d:17:96:51:2f:
                    9a:af:8a:96:35:6f:3d:11:0e:24:ac:68:e6:05:3c:
                    73:33:2d:8b:d5:a5:55:a7:d1:a5:1e:d6:d1:8c:a3:
                    3e:bf:85:6e:28:7b:5d:6b:e6:63:2e:70:49:2c:bd:
                    1f:96:be:84:20:43:5c:3b:a7:9f:cc:78:e7:b1:a5:
                    b7:b0:ea:bd:55:3b:40:b7:e4:b5:c9:66:58:b4:2c:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:16:12:74:89:9B:82:FA:37:82:06:EE:4A:72:7D:19:F5:39:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6b51e063-6d16-3d4b-a3b6-602b5af31da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:2e:3d:a4:e9:c2:eb:aa:ba:e3:29:53:7e:ce:2f:39:ab:
         37:99:ed:4d:48:88:f7:86:05:30:87:0a:7c:9c:36:0b:04:98:
         5b:1b:f0:fc:da:a5:0f:07:c5:9c:38:08:ad:c8:f3:65:ae:ca:
         e4:03:3a:55:56:5e:32:31:77:df:61:98:f2:23:32:1e:0f:98:
         16:be:cb:b4:59:21:1a:80:be:67:60:19:27:c3:b3:56:b5:52:
         f6:eb:bd:36:b4:d2:e6:5e:66:8e:a5:b7:e8:56:56:65:31:6b:
         de:84:20:15:70:4a:85:6c:d6:47:ef:78:c4:d1:07:e8:61:99:
         bc:77:6a:cb:89:5c:0c:07:a1:ff:82:9c:e3:fb:6d:87:d3:20:
         76:54:0a:e2:12:b6:75:b3:2e:aa:9f:42:f2:7b:3c:87:79:ea:
         bd:6a:dc:96:95:a1:e9:a9:0f:48:9a:b7:d9:7f:66:f0:92:6c:
         c3:70:21:8a:bd:c3:61:78:4e:9a:c5:12:65:c3:69:8c:38:2a:
         81:bb:40:f0:ea:71:69:ac:16:d2:ee:0d:09:16:24:40:bf:ae:
         99:76:7e:9d:e0:02:1d:4b:c3:7e:68:ea:8c:70:42:ad:7d:05:
         eb:a3:c1:74:d4:76:62:ff:da:30:56:16:55:2e:37:89:a6:b1:
         b4:2b:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:40:39 2025 by rpki-client