Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
File:                     dcd878df-351d-3045-9ba1-a9aee88944f5.roa (raw, json)
Hash identifier:          GsLNzr1QRjrLz7j9/rOiczxq5gLf0hxTdfQAsYnrs/o=
Subject key identifier:   73:44:D2:80:50:58:43:8B:25:F2:75:45:98:28:09:A9:12:0D:1B:D6
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584A268AC1FF1D272E0C848D5914
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     11248
IP address blocks:        204.8.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c1:ff:1d:27:2e:0c:84:8d:59:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=b8b5a268-fb87-426d-8f20-918776ab2d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:cc:24:f2:9e:69:46:48:67:18:8a:2e:e7:
                    b9:6c:99:49:e1:a2:d3:ea:ca:f8:2e:85:b2:60:39:
                    e7:0e:17:57:b0:96:8e:74:60:1e:89:f4:fe:28:33:
                    10:5f:5d:13:95:6b:36:84:54:97:75:02:13:5d:38:
                    6b:df:ba:66:c0:21:79:03:74:e4:69:3a:ba:a7:84:
                    44:37:b5:d1:cb:d2:20:f3:de:27:b6:67:65:07:81:
                    1f:6e:b1:ad:ca:1c:68:43:cc:0d:0d:60:cb:3b:1d:
                    2a:0a:f2:71:db:0f:50:9c:f2:d8:83:2c:82:6d:d2:
                    ac:b2:e9:ee:ee:af:f9:93:66:86:90:82:b8:f0:61:
                    10:9d:ed:dc:41:4f:28:fc:2c:be:76:49:a3:f9:68:
                    16:cd:9d:3b:3b:0b:5a:3f:a8:4a:17:f6:01:f0:86:
                    10:2f:e9:e1:b4:bf:8a:4f:70:0d:7d:b1:20:74:47:
                    15:e6:9f:a1:b1:7d:3f:13:c2:c1:83:de:29:cc:31:
                    cc:0b:65:56:76:9a:7a:0d:73:da:e3:f7:a9:42:31:
                    74:13:65:0b:88:36:99:b4:88:22:95:a3:84:32:b0:
                    41:7a:f5:85:fc:e7:79:8b:b9:af:9a:53:c2:5c:54:
                    0a:2e:d2:0a:b1:b8:aa:1d:76:b2:79:4c:da:c6:79:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:D2:80:50:58:43:8B:25:F2:75:45:98:28:09:A9:12:0D:1B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:27:52:2b:e2:aa:2a:d9:0b:00:0f:1e:52:a1:10:9a:e0:1a:
         3e:3f:b4:0b:49:78:c6:9c:a5:1f:2c:76:35:13:26:47:8e:78:
         20:f2:2b:06:3b:79:b3:52:cb:41:21:7e:54:42:65:ca:e8:34:
         9c:35:d0:f6:b4:a6:31:1c:22:d8:f2:5f:c6:e9:80:35:58:db:
         a3:52:6f:3c:79:db:a0:77:47:80:f8:75:d3:19:8c:74:cd:25:
         35:27:58:af:f2:97:95:82:57:88:9d:ba:aa:cf:b6:d4:0a:d2:
         94:4e:b2:6e:f7:fb:3b:d5:03:ed:b0:fd:1f:1a:b8:bf:bb:34:
         3c:34:44:7d:0e:6b:11:08:52:12:a3:34:08:ba:4f:27:bf:96:
         27:6b:ce:2a:b8:1e:34:9a:b1:31:71:98:fb:c4:a3:83:84:b3:
         dd:09:d3:42:10:49:98:d7:cd:db:35:cb:29:e0:82:71:b8:57:
         fe:b7:03:49:db:02:f2:7d:1b:68:a1:01:73:8b:33:da:58:be:
         06:72:91:1d:64:f7:0a:fc:db:0c:e4:0b:6f:f6:f8:35:61:0e:
         c6:3f:4f:5c:7e:53:be:95:40:c5:d0:a2:71:78:47:15:98:7a:
         74:84:c9:8e:46:f0:1f:3a:b2:ed:e3:8f:82:2d:5f:5e:5c:8e:
         5d:16:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:16 2025 by rpki-client