Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa
File:                     3c70d43d-85bd-39c4-974b-b26dc07b9073.roa (raw, json)
Hash identifier:          6CV1XKPZZwrZJoSzPO7ct3JuUCC6WoFdtU0dOhP4mZE=
Subject key identifier:   8E:40:C0:C8:0B:11:E8:A8:6C:F5:DF:0E:11:B4:72:CE:45:3C:34:CE
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584A050A7BA8AC185A946DA89280
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     398156
IP address blocks:        168.220.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7b:a8:ac:18:5a:94:6d:a8:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=5c52091a-0db4-427a-9264-4ad733774088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:7f:73:6e:79:df:c9:5f:c4:6a:6e:b1:1b:
                    a1:9f:1c:3c:ef:ac:f9:21:b7:61:97:00:5b:6f:ad:
                    e4:02:60:ef:f5:a8:a4:6a:3f:89:da:86:a6:12:44:
                    b3:8a:51:56:ee:9d:35:b1:bb:d1:26:fe:13:5f:bd:
                    62:4b:9b:4e:f4:31:e0:86:17:84:85:1c:fd:99:58:
                    aa:e3:74:d3:5b:90:c2:53:71:7d:c7:70:70:f1:69:
                    a6:8f:df:5e:c6:64:87:94:39:5e:73:b9:bb:31:6d:
                    4d:c5:8e:2d:94:4a:8a:91:90:98:a5:17:80:ee:c0:
                    03:da:b8:65:ad:5a:aa:94:0b:91:ce:ba:3b:ab:85:
                    19:84:51:d2:6d:8d:07:a0:4e:6c:0e:a5:81:0a:d0:
                    e4:b6:51:0e:f0:ab:43:60:d7:48:69:91:bf:3b:28:
                    e3:50:99:dd:e6:16:1d:3c:99:c2:cb:4d:83:36:01:
                    e6:e6:72:31:79:c1:bc:d5:a7:df:ef:28:7a:63:a5:
                    da:e2:38:74:09:60:82:2b:58:f8:17:27:da:e2:15:
                    1d:74:38:55:43:ff:69:79:b7:f5:e9:f2:0d:c3:1e:
                    19:49:95:a2:0d:7c:85:bb:2e:58:0e:f0:1c:78:ce:
                    0b:cd:80:e4:b0:f8:3d:16:fd:25:77:f7:8b:e1:66:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:C0:C8:0B:11:E8:A8:6C:F5:DF:0E:11:B4:72:CE:45:3C:34:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:de:35:5a:94:88:c5:a7:b3:a8:f4:37:d6:50:49:00:7c:
         0b:84:4a:d5:2b:16:80:7c:c2:76:d7:c1:72:65:29:70:40:6c:
         cf:3d:9e:83:c2:22:9a:f8:29:5f:69:73:9b:37:69:a7:ea:09:
         5b:47:59:9c:78:2e:82:bb:cb:9e:92:28:7f:10:ef:ef:6d:51:
         bb:ec:c9:de:f5:01:6c:0f:3f:ac:36:9b:40:88:b7:64:b9:b0:
         c5:74:7a:a0:66:60:f7:75:ff:be:d5:eb:ae:0c:e2:b2:96:f0:
         11:16:19:3c:c2:72:cc:a2:8b:81:70:ec:63:9d:fb:a0:96:e8:
         d8:4b:8c:3f:55:7d:52:b7:2f:74:ca:20:cd:7b:b1:03:2f:75:
         ab:7c:6a:35:65:c7:da:15:6b:1f:e7:de:61:ab:e6:f1:20:be:
         64:1d:07:1f:3d:cf:bb:93:54:1e:bd:1f:30:c3:4e:91:c8:f2:
         15:a4:bf:e7:9f:3a:a9:b9:ce:15:d7:e0:65:76:bb:25:f5:cc:
         56:7c:c7:85:38:67:32:3e:31:8f:8a:5e:ec:28:98:2b:38:9e:
         d0:f7:f3:d2:8b:71:10:dd:cc:35:9b:d2:38:e3:8d:50:c5:ed:
         05:12:a5:f6:6c:01:8a:3e:a8:de:4a:08:a8:6b:a7:ae:82:fd:
         2f:03:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:24:39 2025 by rpki-client