Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
File:                     208a5d2f-5933-32e5-aaaa-898bcac06735.roa (raw, json)
Hash identifier:          TjuRUkPND7623KT3frgmihBx+4nk3tyCUskQAwB6Rnc=
Subject key identifier:   D1:7B:03:8B:9B:39:66:A8:7B:BF:9A:C0:E0:4F:26:0B:53:5D:E1:7A
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584A17300B3FE6CD5F06258FBB80
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     30045
IP address blocks:        199.212.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0b:3f:e6:cd:5f:06:25:8f:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=f5f45818-fae1-42bd-8610-6e730c8b9603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:84:3d:bb:21:dc:2b:a1:06:96:f2:61:73:
                    7b:37:4e:c7:69:aa:21:81:67:f5:51:01:b0:2b:e6:
                    e6:bb:a8:10:06:1e:9b:90:d8:03:f3:73:6e:d2:8c:
                    86:a0:73:63:47:31:21:b2:ed:6d:18:ab:20:96:51:
                    73:28:c1:b6:82:0e:e6:c3:6a:a4:7e:a3:b1:ca:ac:
                    24:1b:1f:36:c9:49:01:d2:c4:29:6c:99:9c:ef:48:
                    da:87:d0:70:76:07:13:30:4e:d6:b8:f5:ca:59:cf:
                    a5:7d:9a:b4:8c:a5:f1:85:a2:00:3e:cf:92:43:0e:
                    3d:87:6b:64:cb:ec:ee:5c:88:4f:ea:86:aa:28:33:
                    f0:32:c3:b6:1d:96:58:93:03:21:3e:cd:75:98:d0:
                    19:e7:4d:94:7d:ca:56:f6:49:da:e6:3a:7e:97:b6:
                    11:19:e7:91:8f:32:c2:60:ba:e6:03:46:d5:54:94:
                    fc:48:e2:19:2b:61:45:57:38:e2:63:9a:b1:04:7f:
                    57:e9:61:30:39:7c:7f:b5:cd:1e:94:67:21:e7:58:
                    6c:d1:fc:bf:00:2f:fb:8f:b1:e5:72:d6:89:2f:7e:
                    3b:8b:47:39:e0:97:5f:07:55:cc:1e:a0:a5:79:80:
                    a9:84:9f:c2:a6:be:79:21:19:6c:5a:de:17:85:4c:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:03:8B:9B:39:66:A8:7B:BF:9A:C0:E0:4F:26:0B:53:5D:E1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a7:09:26:23:ce:67:c5:ab:66:76:9b:24:ee:fd:2f:da:2b:
         7b:a8:d6:66:3c:47:12:15:a7:5d:99:53:0c:2c:a5:9f:19:53:
         a9:3e:a4:77:13:35:89:32:ff:ed:c7:72:88:93:27:a6:01:47:
         1a:af:24:84:c7:5e:d5:4e:d7:3e:ec:84:d9:b5:26:2e:b9:9f:
         87:0d:44:03:80:79:26:b5:0c:4e:cf:be:8b:91:d0:63:14:a1:
         5f:82:80:d7:de:9e:0d:0e:1e:fc:25:2c:0d:ee:65:dc:79:65:
         30:09:29:af:c5:9f:7a:05:ea:29:a5:4a:4d:26:d5:b6:45:df:
         1e:72:b4:c8:76:15:b5:d7:a2:71:db:cf:c1:b2:96:82:61:ad:
         30:eb:22:e3:d2:c8:5a:19:a2:50:77:f1:10:b9:f7:0a:98:e9:
         82:12:b2:37:73:e8:bd:fa:4d:0a:f0:99:cf:ae:14:ba:cf:f5:
         23:5a:1b:d8:64:d6:e2:69:d0:9c:06:6a:09:96:69:8a:1e:41:
         72:99:04:10:17:e7:ce:99:68:71:29:08:71:70:12:88:58:81:
         01:d1:39:b4:0b:57:cd:ac:1d:c2:f3:4e:e3:d6:25:4e:fe:2a:
         6c:d7:40:f6:9a:e4:c2:f4:79:52:99:64:52:08:9e:83:82:6d:
         63:33:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:34 2025 by rpki-client