Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
File:                     3668a37b-a50d-3732-b77d-a313fa326510.roa (raw, json)
Hash identifier:          N7Lp2JG+6phZWSnEjHl3sUMqaEqel7OGbXAckHoyHAs=
Subject key identifier:   8D:9A:3F:B2:C9:BF:55:1D:44:8C:75:3D:0B:D2:3F:EB:E8:FF:E5:15
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584A1730047B4B58B7DE2112C1B4
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        208.70.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:04:7b:4b:58:b7:de:21:12:c1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=e5f405f4-06b1-4954-975d-4ba7ba7dcfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:9b:0a:7a:56:6b:bb:6b:3b:a0:49:36:87:
                    0d:ae:9e:90:c3:0a:7e:7a:d9:43:73:83:b0:57:ec:
                    89:77:6b:56:1f:c5:2a:23:77:7e:8f:c1:c1:64:32:
                    b3:90:86:77:5e:0c:da:a5:79:ff:0c:9b:39:fa:79:
                    b2:72:61:62:62:2b:1c:e8:c7:cf:ab:dd:6f:58:e0:
                    b3:4c:5c:be:98:0e:0b:d0:9b:02:9e:f0:f1:5f:c0:
                    aa:7d:94:65:67:de:62:04:7f:df:74:9d:3e:24:4d:
                    42:46:cf:8d:7d:db:0c:19:76:af:00:ab:e0:04:e1:
                    13:f6:67:52:35:9e:8c:5a:9d:4d:48:a7:df:cd:b6:
                    e0:63:c9:db:02:3a:39:ac:8b:be:4c:8d:eb:65:46:
                    ca:95:dd:4b:ce:0e:4f:5a:65:db:ad:26:92:3a:50:
                    80:c8:21:21:bf:d2:de:6c:0c:0e:a0:10:65:c4:70:
                    6a:86:4e:27:00:74:e1:92:21:60:06:37:c1:05:a8:
                    de:04:3e:34:33:6c:5b:64:a0:e4:fc:b5:ae:32:31:
                    10:fb:cf:bc:c5:b4:e0:6b:80:9d:21:24:f7:26:4a:
                    cd:c9:bd:69:28:21:68:a0:72:78:93:11:9a:c9:bd:
                    d9:6a:c8:c4:ff:f6:19:56:a3:02:47:83:c5:43:e2:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:3F:B2:C9:BF:55:1D:44:8C:75:3D:0B:D2:3F:EB:E8:FF:E5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3c:53:18:3a:c7:9e:cf:e5:a9:f0:d1:fa:ac:34:2f:d4:47:
         34:10:49:e2:d1:a5:aa:f7:dc:04:86:d2:3a:9c:54:5d:f9:20:
         53:d6:2b:04:3f:33:d0:6a:70:b1:e1:6e:aa:10:a0:2e:33:59:
         e5:54:b0:97:e3:8d:19:17:9c:8c:00:2a:7e:83:41:b1:38:e3:
         3b:ea:8d:27:fd:27:a2:db:4d:e1:d9:fa:02:87:4f:52:db:c6:
         70:78:37:0d:f5:52:6c:39:80:d6:39:b8:5e:76:37:f9:ef:aa:
         32:4b:76:83:fe:79:b5:4b:66:14:62:9b:a8:4f:88:e8:ba:a7:
         95:24:e1:ea:c1:1c:53:01:8e:5c:78:30:de:80:34:b7:49:4b:
         1e:f6:b3:c9:59:c4:1c:f4:de:6b:05:c5:c0:0e:e5:f4:31:5e:
         43:ec:a1:a0:6a:ba:22:93:aa:97:38:38:5f:bd:5a:84:8b:ea:
         78:5b:6e:50:13:42:c7:04:8c:12:a8:f0:44:74:06:6a:6d:91:
         a7:69:fd:34:d4:18:6c:06:d6:a2:a8:82:9c:02:13:05:e5:6f:
         c8:52:5c:c4:a9:8d:81:d2:80:4f:92:ac:8e:5c:62:00:37:77:
         c9:b6:2a:f1:cb:00:ae:de:d5:cc:02:3a:4e:47:4d:6d:02:b1:
         d9:42:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:30 2025 by rpki-client