Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
File:                     c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa (raw, json)
Hash identifier:          skzZVYsLhoGJ2jkAbI4KXQpZ1Lks6bUUBlk/JUt2s/c=
Subject key identifier:   2F:44:6F:87:49:03:9D:DF:24:8A:C7:CF:F8:1C:68:AF:88:61:D9:CB
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F4328584A2D857F117C71F661FADCBFDC
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     399820
IP address blocks:        204.137.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:7f:11:7c:71:f6:61:fa:dc:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=caf96027-b2e3-40a0-aa81-86a20c33381b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:d7:fc:e3:59:67:a0:b6:3e:bb:24:f4:32:
                    67:80:f8:4a:6f:07:5d:52:d1:f1:6c:73:d5:74:81:
                    a0:ef:10:ff:f3:08:ef:32:2b:81:90:03:2c:93:cd:
                    b6:40:9f:5a:2f:5b:ee:a1:f1:e6:d7:93:c6:84:ad:
                    a3:88:52:12:87:14:91:a5:79:d8:ec:c0:16:6b:cd:
                    79:c9:ae:90:9b:bb:06:1b:b5:23:c6:72:1f:23:34:
                    6e:e6:27:c8:bc:9c:7e:75:25:62:f6:ae:b8:30:a8:
                    fc:46:cd:d9:df:e9:6e:1c:3a:6f:39:eb:e8:e9:63:
                    53:52:f8:49:10:35:d7:40:c8:3f:bd:58:b3:a0:57:
                    46:5b:38:8d:86:c0:71:b7:56:ff:d2:df:31:8a:68:
                    1e:70:12:64:b8:49:7b:9b:13:f5:25:d9:ca:af:c4:
                    91:97:1b:52:52:60:de:e6:70:d7:8e:0e:ff:ba:26:
                    81:f0:0d:26:71:ba:5d:64:7c:18:1f:f0:63:35:c8:
                    61:5c:f2:a4:8e:cb:43:aa:bd:b2:d3:ce:48:00:38:
                    1f:f7:d2:22:96:5f:04:49:29:04:9b:81:22:86:81:
                    6b:3a:23:96:a8:b0:cd:1a:75:2c:df:d5:1d:75:ce:
                    36:72:af:95:4e:b8:60:88:1d:11:e8:86:d4:a0:b8:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:44:6F:87:49:03:9D:DF:24:8A:C7:CF:F8:1C:68:AF:88:61:D9:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.137.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:9c:bb:4a:1e:7b:58:b1:64:1e:af:da:bb:fc:0a:06:cd:
         c6:27:72:37:cd:a8:16:ce:51:cc:d5:7e:6d:31:e2:40:c2:45:
         fc:66:c4:f6:09:e7:f6:a9:76:51:c0:17:40:2d:fa:d5:8c:9a:
         1f:ea:84:e0:99:0e:d4:43:ce:0b:92:cd:4e:01:54:f2:77:db:
         0e:7f:8c:05:e9:a1:41:3f:2a:41:e3:08:96:26:2c:22:e8:e2:
         62:65:18:90:fc:78:da:30:59:75:9c:a1:ec:8e:e4:a4:1e:4c:
         cf:93:30:87:85:3d:20:2a:2b:31:19:44:9a:8f:98:96:d3:b0:
         6d:aa:fb:d3:2e:ad:44:39:9a:8d:40:27:19:e8:42:a4:c4:1c:
         20:87:9a:11:5f:44:a2:77:a0:68:72:19:15:a2:9e:57:ff:44:
         cc:ff:40:cd:4d:9f:cc:4d:4f:3e:a3:78:48:7a:1e:cc:44:d0:
         72:59:d1:1c:76:94:9c:d1:3c:90:00:3a:4e:d5:7d:aa:ab:54:
         58:06:72:70:80:fb:41:b2:8b:12:d5:4d:70:9d:c6:df:ad:3b:
         38:67:73:8c:fa:74:39:bb:6c:39:4a:1a:aa:89:6d:4a:e3:53:
         67:73:64:db:44:59:61:aa:68:38:b1:31:26:f0:35:2d:a1:25:
         b9:94:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:11:52 2025 by rpki-client