Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/fbcfee6b-be2c-3927-9d6c-65bc070e8210.roa
File:                     fbcfee6b-be2c-3927-9d6c-65bc070e8210.roa (raw, json)
Hash identifier:          vnU/dZllsaxbLE1HSJXgNV7jwRv+HPSxuQaRXp3bBLw=
Subject key identifier:   DF:87:CA:31:AD:FC:3D:9C:DA:65:11:2F:9A:55:DB:99:B9:8A:83:E8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCF63D2A8192706696700
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/fbcfee6b-be2c-3927-9d6c-65bc070e8210.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        142.79.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:cf:63:d2:a8:19:27:06:69:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=96eabae3-08f8-4c26-af60-bdc280d769e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:c7:8d:71:69:22:8c:0b:33:2f:e2:5e:23:
                    85:45:63:89:f1:ec:a9:2d:03:73:f6:bc:56:e8:fb:
                    5f:86:9f:b1:fa:b7:7b:c9:65:ee:39:ff:33:c6:1e:
                    ad:64:98:53:ce:ce:c3:7f:e6:96:72:4b:21:a5:9c:
                    8e:ca:a9:33:b4:a0:bf:0f:64:57:71:86:56:e0:63:
                    7e:db:36:ad:20:7e:59:ee:42:48:6d:59:70:d7:70:
                    02:fd:18:12:f4:d6:63:51:54:c3:42:e3:f6:20:9e:
                    64:e3:8f:7a:aa:ba:de:b4:c5:c1:9d:70:24:d2:8a:
                    19:90:5b:9f:00:bd:fe:31:69:26:06:a1:7f:54:75:
                    77:0d:53:42:17:74:3e:82:64:35:0d:7f:64:b4:d8:
                    0d:57:b9:c9:c7:94:d0:5b:01:64:62:54:f1:60:05:
                    ac:e8:97:19:b1:c4:35:a7:63:eb:d8:2f:07:58:6a:
                    44:c8:e0:37:79:cd:88:9a:dc:85:dc:56:1c:b1:d0:
                    7c:69:8b:6b:60:a6:cf:2d:18:81:6a:b9:05:9d:21:
                    de:0f:4d:8d:6d:1f:da:98:8e:cd:19:ec:a4:27:d9:
                    34:c8:ef:83:b1:a4:69:b6:4e:27:d2:d6:f8:6a:66:
                    c6:aa:b4:38:42:f2:16:e1:02:78:71:29:a7:af:90:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:87:CA:31:AD:FC:3D:9C:DA:65:11:2F:9A:55:DB:99:B9:8A:83:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/fbcfee6b-be2c-3927-9d6c-65bc070e8210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:da:cc:4f:8a:8c:30:f1:f0:1f:19:4b:91:fb:0d:89:3a:0a:
         b4:c0:97:fc:84:cd:b3:9c:d0:f2:87:91:d8:91:28:9e:c8:dd:
         8c:90:df:e4:1f:ce:37:7e:6d:ba:b7:03:95:90:b8:c7:3c:ed:
         35:47:93:f8:89:eb:f5:7a:22:f2:07:7d:be:d0:4e:2f:d8:fc:
         a3:6e:1c:e3:10:01:60:dc:35:a5:6b:4c:7e:a7:af:1c:77:c0:
         03:e6:b4:20:ec:ec:d6:c2:be:ee:b9:aa:3e:46:62:9e:66:de:
         0b:e2:76:f7:d5:12:f6:46:db:47:25:bd:e9:86:68:88:19:c1:
         fb:bb:d3:8c:54:9c:04:80:eb:af:67:98:53:7f:eb:c2:13:df:
         bb:d9:20:df:29:e2:ff:20:c8:8b:54:82:e2:5a:3f:b4:d3:0b:
         1a:a2:cd:4c:1f:6f:b2:5b:68:2d:b8:f7:36:03:30:a0:23:81:
         fb:f0:87:11:b3:e5:bb:d6:f9:17:ab:18:d9:15:fe:32:98:0d:
         82:fe:6d:51:85:16:7d:47:95:12:b0:33:56:33:81:8b:2a:01:
         df:e5:ad:4c:47:97:fa:b7:95:80:51:b5:41:5b:df:40:9e:7e:
         26:d3:1a:a4:28:93:96:0f:c0:c4:e3:f6:b9:30:fc:4e:12:05:
         91:19:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:06:09 2025 by rpki-client