Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/bd2c1049-187e-3bbe-bb4e-f6ef346b1928.roa
File:                     bd2c1049-187e-3bbe-bb4e-f6ef346b1928.roa (raw, json)
Hash identifier:          Kb9sfE3jg2Kiq4x9kkihrvVTNiysfPxJxoQUhxryZ1E=
Subject key identifier:   D0:D1:B5:A1:C7:1C:00:D1:DF:5D:A4:5C:04:62:C0:CF:AA:30:65:AE
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584A89A61123A5F614B2643A6880
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/bd2c1049-187e-3bbe-bb4e-f6ef346b1928.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     6994
IP address blocks:        173.195.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:11:23:a5:f6:14:b2:64:3a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=25001cb4-667a-4573-8ef4-e864a47b347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:1c:f6:5c:d0:53:8a:06:cb:a8:3c:9c:be:
                    7c:51:7b:6b:e4:ff:6f:76:e1:2a:57:72:f3:1f:e1:
                    0f:31:7e:a1:0f:3f:e7:ff:a2:6f:19:3b:02:44:8d:
                    81:eb:08:72:e5:77:b3:67:e7:78:33:1d:ed:6c:06:
                    17:99:ba:41:a1:03:9f:3e:b1:4b:09:74:a6:a5:10:
                    73:cb:e8:3b:ef:d8:57:ce:96:28:eb:02:b1:7f:9b:
                    b7:8e:b9:9f:56:2f:58:7d:41:86:8e:97:c0:e4:7b:
                    2c:54:1f:4c:68:72:ce:2a:47:59:12:5d:cd:7a:51:
                    f7:6a:04:06:98:8f:3a:57:bf:91:77:09:b8:1b:cf:
                    c3:12:25:aa:de:a9:21:0d:ac:55:a4:11:a8:90:80:
                    95:10:b0:49:e5:0d:13:1f:78:5c:7a:b9:79:7c:32:
                    c8:cb:d6:92:16:e7:df:b3:f7:62:27:40:6b:0d:ad:
                    ae:93:3c:4c:e0:bc:31:de:a7:90:3d:85:33:29:cc:
                    05:39:04:19:72:7f:21:03:a6:81:e5:b4:bd:71:2f:
                    78:fe:45:95:d6:29:dd:bc:f1:6a:59:68:d7:34:ee:
                    80:82:87:4f:42:1f:28:56:bb:6c:7d:14:4a:3c:68:
                    d6:2f:45:44:39:03:83:8d:06:77:ec:76:b3:22:9f:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D1:B5:A1:C7:1C:00:D1:DF:5D:A4:5C:04:62:C0:CF:AA:30:65:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/bd2c1049-187e-3bbe-bb4e-f6ef346b1928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:36:ba:f1:dc:0d:b4:42:da:a4:98:24:a0:0a:fc:06:88:f7:
         0b:65:f8:b1:12:08:78:f2:47:73:19:1b:0d:65:74:50:b1:9d:
         96:19:30:5e:e8:96:94:b2:04:e8:a3:1d:83:55:c5:b4:7b:ff:
         48:cf:37:c3:71:69:2a:0f:ec:a7:9c:73:f9:1a:93:a5:07:9b:
         95:38:c1:7d:c8:cd:c9:73:31:8a:d2:a7:12:f5:a2:c1:57:37:
         d1:fc:34:5e:11:be:51:0d:2c:40:30:40:b3:c2:c6:05:da:56:
         9d:fa:14:66:f4:07:41:7b:40:66:a1:79:77:21:65:37:b5:e8:
         9a:c2:05:d7:a7:b5:98:bc:cf:54:36:7b:f8:f7:d9:7c:4e:69:
         cb:a6:fd:33:d3:0e:8e:71:f8:59:00:3b:0b:07:a9:8c:e4:cd:
         f8:a4:b4:f5:7b:aa:1c:a7:63:31:9e:ec:e5:86:da:9f:8c:38:
         b6:4c:fc:98:19:b7:db:50:16:5b:19:54:45:94:75:eb:5d:c3:
         67:77:96:3f:eb:e2:88:69:a4:23:7b:2e:1d:1d:29:37:34:5f:
         5e:7d:33:d4:cd:38:c5:3f:4e:47:73:1a:8f:1b:d4:b6:a2:cc:
         36:86:0b:4d:f5:da:43:a3:74:cf:6b:04:11:e7:25:31:44:f1:
         56:57:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:00 2025 by rpki-client