Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa
File:                     eb6bc177-0801-37e2-977d-c23f6a5ca132.roa (raw, json)
Hash identifier:          Fzrrpwosdv4S+5MiooKD3rS0ckpExcgXZGpLuau5wHc=
Subject key identifier:   63:4B:55:9C:09:4D:36:7F:BD:A2:E8:D3:D8:92:28:C4:47:68:C2:72
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584A1730095F08F2C5D5E571A8C0
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     398210
IP address blocks:        168.220.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:09:5f:08:f2:c5:d5:e5:71:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=298af2e1-0b68-4fce-9fcb-825864d050ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:e0:a0:ec:a5:97:13:f4:ab:a7:26:c1:d6:
                    bf:39:3d:dc:11:d5:f8:57:58:ea:47:14:dc:97:a1:
                    d8:fd:f9:a8:a6:0f:4a:ae:11:2d:45:79:b6:55:c5:
                    6c:f6:08:93:c2:bc:13:95:3e:65:de:96:d6:ee:10:
                    58:3f:33:0d:0b:c0:4a:6d:b4:94:6f:2f:e1:85:dc:
                    75:8d:d4:e5:4b:4c:83:53:2a:31:a5:21:bb:e1:a1:
                    d4:fd:30:08:96:70:92:7b:c4:93:20:1a:3f:49:53:
                    94:d2:ed:85:39:9e:2e:6b:88:ba:00:51:a8:6b:05:
                    10:f2:19:71:29:91:55:53:9c:ba:e3:a5:e3:6e:96:
                    97:c8:b8:10:1b:ba:74:fa:fd:0f:bc:1f:2c:6a:12:
                    6b:63:66:22:e4:8f:00:1a:78:f3:17:20:05:be:b9:
                    09:13:0c:b2:a3:01:5c:89:ef:f2:9e:5d:5f:1f:8e:
                    c5:36:c0:9e:77:75:ae:a0:14:03:b7:35:f9:38:b4:
                    4a:44:e2:52:d2:5a:63:5b:98:f2:da:65:7f:b7:60:
                    15:bf:58:0d:d4:6a:e9:1e:f0:54:3b:9b:70:75:11:
                    39:fa:53:a6:f8:1d:d9:d2:6f:9d:64:a0:9c:aa:19:
                    8b:1c:cd:50:83:85:33:3d:e3:1b:0a:da:2c:32:1a:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:55:9C:09:4D:36:7F:BD:A2:E8:D3:D8:92:28:C4:47:68:C2:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:72:58:c2:b0:f5:9e:37:d6:ef:d2:4b:56:f8:cc:63:fc:15:
         e8:d8:3c:97:ed:52:36:b4:01:f1:a6:7e:7a:96:f2:97:5f:c6:
         a9:b6:c2:39:3c:bf:10:81:5c:ae:ee:3c:30:0b:e7:f3:b5:6b:
         44:ac:f3:b4:e9:68:64:00:ce:6a:c4:62:5a:3b:6d:26:a3:9a:
         d0:08:e5:42:40:b4:3e:82:e5:1d:c0:f7:34:6c:90:29:4d:be:
         aa:1a:db:95:85:ff:15:13:c3:87:b3:39:17:c3:24:90:94:a1:
         6a:75:b9:5e:5c:27:e2:a8:6f:f7:fb:b9:5d:79:12:87:b4:03:
         f1:7f:76:02:11:c0:43:c6:ea:c5:51:25:9d:2e:16:13:27:50:
         6b:a0:4d:cc:ea:75:26:50:71:2d:ce:5c:e3:72:e0:3c:f1:24:
         c8:ce:68:ec:7a:ab:a3:7f:5f:80:b5:92:b8:0c:a2:70:10:98:
         53:96:3d:79:73:24:0b:2e:69:a3:ce:6c:b7:0e:9b:5e:be:be:
         62:4c:bc:ca:84:9d:36:a6:3b:24:07:6b:29:98:8b:bb:78:23:
         98:57:4a:6f:1f:3c:96:ec:c1:2f:28:f1:28:82:c5:42:5b:b0:
         29:4d:86:97:a4:3a:1f:0f:2b:c4:05:de:5d:f6:5b:e7:6e:45:
         ff:b8:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:07:08 2025 by rpki-client