Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/c9fad4df-f5f9-388f-a0b0-061d4e9e84dc.roa
File:                     c9fad4df-f5f9-388f-a0b0-061d4e9e84dc.roa (raw, json)
Hash identifier:          VEU0kcwQ6UMHp+kqTmSfVRuTdG5zJlZPLsVEqzuEfQY=
Subject key identifier:   86:84:2A:3F:D6:D2:4A:B6:B2:A7:9D:8B:47:C8:8F:98:07:EB:05:E1
Certificate issuer:       /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Certificate serial:       010D0C9F43285849F44A5D465188B040150AE580
Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/c9fad4df-f5f9-388f-a0b0-061d4e9e84dc.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     11700
IP address blocks:        192.139.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5d:46:51:88:b0:40:15:0a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=5ec407b2-65c3-4fc0-8082-cb119d4d9e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:82:2e:0c:d5:11:9d:bb:09:0c:a3:67:39:
                    72:e2:26:e8:64:90:39:e2:73:40:25:7b:06:81:86:
                    27:0f:50:c4:c1:86:3f:f0:ad:d1:a2:98:a4:2f:54:
                    20:01:75:06:86:d4:ff:58:58:f1:2f:ac:91:52:de:
                    b4:a5:9c:62:3c:ee:81:14:60:3f:a8:7d:79:64:f3:
                    e0:29:83:3e:f7:67:fb:7b:17:9e:fd:20:db:8a:13:
                    cf:cc:3a:a1:90:98:15:5a:5a:ea:24:fe:0e:68:0b:
                    2a:10:e9:25:c8:4b:3e:96:c7:aa:37:03:ef:27:39:
                    f7:db:79:da:83:3b:96:02:ce:27:28:5e:f4:3d:e3:
                    57:46:96:19:d9:41:b9:d9:41:43:9f:4f:f7:ef:2f:
                    1e:da:75:a1:77:db:23:98:3b:1a:cc:49:2b:b7:e5:
                    a7:d3:ff:65:98:09:c7:6e:37:ff:64:29:b7:69:57:
                    f7:ff:2a:00:62:0b:5c:09:9b:9d:e7:66:72:1f:ed:
                    5d:f8:8c:bd:fd:76:c3:ab:90:95:cd:de:87:dc:59:
                    9a:06:b2:32:9f:60:10:64:0d:da:c4:71:b7:c4:b8:
                    f7:06:b7:1a:35:60:21:bb:0a:42:88:ed:48:fe:f8:
                    18:2a:ef:10:7a:57:84:5a:de:a3:c8:94:0d:a7:73:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:2A:3F:D6:D2:4A:B6:B2:A7:9D:8B:47:C8:8F:98:07:EB:05:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/c9fad4df-f5f9-388f-a0b0-061d4e9e84dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl

            X509v3 Authority Key Identifier:
                keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:94:fe:3c:7e:24:1c:0f:9c:8b:ff:a4:f9:86:db:45:e9:
         10:5d:e5:02:57:6c:20:78:2a:3f:5a:2f:0c:ed:9b:57:88:40:
         d6:c4:76:13:db:fc:00:f7:49:ef:80:af:79:ea:ee:cd:ad:47:
         0c:08:68:88:42:a5:e3:ce:2b:ca:ff:e4:ba:bb:01:e6:70:65:
         91:22:07:54:63:98:19:45:d1:57:d2:b6:2c:ab:8c:48:f5:20:
         4f:70:9e:b9:d7:bd:36:c1:70:91:4c:d3:be:a2:d4:2d:aa:ab:
         d0:90:12:e8:75:e5:c4:2b:76:d6:2b:d6:7f:f7:e8:77:59:41:
         99:63:ca:23:d4:c4:00:bc:1a:b9:35:94:b1:f2:6c:28:2c:9a:
         eb:7f:c5:f5:5f:7a:28:4f:2e:e3:ac:0f:5d:ee:e5:2e:d9:2b:
         a4:c2:eb:33:02:ed:a5:e4:ef:20:8d:63:03:b2:55:a4:38:0d:
         db:fc:7e:4a:1e:18:58:38:49:b2:86:33:a2:15:58:07:8c:5f:
         76:a1:0b:59:2c:a9:83:e7:cf:4f:2b:dd:77:01:0f:84:71:b3:
         0e:95:6b:dc:75:39:c6:df:0f:e3:e2:05:c7:e8:18:04:bb:3e:
         a4:cc:73:3a:b8:c3:17:20:2c:fe:fb:12:a5:4b:6d:09:98:4c:
         df:b5:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:03:19 2025 by rpki-client