Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa
File:                     d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa (raw, json)
Hash identifier:          HEAvmzMZy+m4pFbDEekgW23yIK00OHdHEX4TnGYMc7w=
Subject key identifier:   30:E2:9F:DA:04:1E:B6:83:5C:9E:7C:78:01:D8:22:A0:19:E4:B2:67
Certificate issuer:       /CN=bcb20664-51b2-4919-9c78-27ce58e571d9
Certificate serial:       010D0C9F4328584A963693A13C38774D780C4100
Authority key identifier: 22:02:C5:3C:A1:BA:E9:97:2F:1D:BD:D2:19:05:40:C5:7C:AC:A2:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     394462
IP address blocks:        204.69.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:93:a1:3c:38:77:4d:78:0c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb20664-51b2-4919-9c78-27ce58e571d9
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=52aa59ec-5516-4371-9fdd-ad8672566172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:71:44:20:1f:a7:d3:58:60:0f:be:aa:b7:
                    1d:86:13:c8:10:17:dc:6b:2d:28:11:ec:6e:38:09:
                    fb:75:25:ea:08:51:8b:fa:7e:94:84:6f:09:52:c1:
                    3d:e3:20:4d:2a:16:25:c4:1e:f4:06:0f:92:c3:17:
                    0a:7a:5c:9b:b0:ef:75:8e:aa:28:ee:70:2a:d1:42:
                    c5:f6:1e:a3:70:3a:33:4e:81:8b:e4:f8:49:6a:04:
                    71:6c:3e:c7:f6:4b:ef:92:9f:26:40:0d:8d:ca:06:
                    9b:29:75:51:9d:5a:3f:b1:32:9f:8b:d4:79:b8:53:
                    cb:83:18:49:10:61:95:1e:af:3b:7c:0e:10:85:ec:
                    65:6c:f4:23:ed:5b:a8:45:99:48:cd:2e:cd:51:f8:
                    24:10:40:f7:d7:ba:bd:04:da:64:85:85:89:21:08:
                    5e:84:1b:da:59:f0:55:f5:8b:08:cc:f4:c7:11:bf:
                    e6:4d:b6:c6:de:0c:6a:e8:09:5f:2e:73:32:1d:72:
                    a3:56:ff:79:3b:b5:15:6d:ff:21:4e:5d:5c:a2:4c:
                    82:32:03:f7:f9:1b:48:a7:1b:27:81:49:7c:19:de:
                    84:9c:59:77:53:80:7c:a7:e7:fa:8b:16:60:40:a3:
                    96:27:15:66:6d:23:e3:2e:a8:8a:47:e7:36:e3:34:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:9F:DA:04:1E:B6:83:5C:9E:7C:78:01:D8:22:A0:19:E4:B2:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/d0850b9d-4bfd-38e4-b542-e85ba9bc54fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.crl

            X509v3 Authority Key Identifier:
                keyid:22:02:C5:3C:A1:BA:E9:97:2F:1D:BD:D2:19:05:40:C5:7C:AC:A2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:ad:9e:c2:0b:32:eb:70:57:71:42:86:ab:48:d9:80:72:
         93:9e:7e:df:16:7a:0b:b1:4c:cb:53:bb:64:80:17:57:f1:29:
         f5:e2:10:e2:32:82:74:36:1a:35:2f:c0:7d:52:f6:23:d9:fb:
         ec:ad:36:6c:d8:5b:19:28:e3:78:9e:7b:c2:f3:af:32:dc:02:
         e2:d6:e8:87:ab:69:64:fd:8c:96:8b:78:49:7b:0b:b7:92:36:
         67:69:e3:ca:f2:62:37:4e:c7:bb:38:df:22:7d:55:e6:69:59:
         0f:30:30:6d:78:07:ec:8f:3b:ae:54:d5:63:e5:5e:e0:46:f7:
         20:80:6f:95:6a:9c:c0:8c:4d:c1:08:44:9f:d9:55:07:78:bd:
         17:c3:fd:0b:1b:b9:7d:f7:a3:fa:81:84:f1:34:2a:d3:4f:09:
         1e:c3:84:d2:a7:e7:5c:b5:cd:36:53:d2:63:1e:56:35:4e:60:
         56:41:2d:42:f4:c9:f6:ee:e8:25:62:cc:b7:c4:e6:24:d8:4e:
         a9:e9:6a:ba:cd:49:66:91:bf:b0:63:c0:6e:83:12:0a:e0:e7:
         7b:ca:cb:59:ab:63:5e:d6:c1:50:13:2d:2e:ae:96:9b:39:81:
         c4:4f:61:9b:87:9c:cd:d9:f5:29:0a:00:b8:0b:2f:d1:e1:7a:
         5c:3a:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:58 2025 by rpki-client