Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/7afb3ded-1466-3539-af35-d9cadb2acd7b.roa
File:                     7afb3ded-1466-3539-af35-d9cadb2acd7b.roa (raw, json)
Hash identifier:          UsvA4h/unXtCtmeX5bfNNAVT1xL/509Xj4+Ydv+9HC8=
Subject key identifier:   3F:FF:0A:65:70:82:39:9E:E0:8F:77:69:9C:FF:DB:9A:24:72:74:05
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01C2C091B0143E0942900
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/7afb3ded-1466-3539-af35-d9cadb2acd7b.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        76.77.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1c:2c:09:1b:01:43:e0:94:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=73f14116-1fe0-43c6-a255-ebf547abccdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:96:24:80:02:66:02:e0:44:98:00:d1:d7:
                    43:8c:3a:1b:32:e0:f6:43:b8:64:47:c0:ec:ab:1d:
                    32:b0:36:0c:75:82:da:94:05:20:3d:68:20:ed:bc:
                    00:56:0d:03:09:6c:bd:d2:b4:84:06:47:6d:67:32:
                    70:16:be:eb:76:9a:78:61:cc:26:13:06:58:4f:1e:
                    32:4c:b2:4f:e5:29:cc:d8:40:e1:2d:15:04:b3:62:
                    2d:f0:42:94:4e:e9:18:c2:b1:db:36:2c:17:a3:62:
                    cb:49:be:72:6d:93:94:e5:48:08:eb:07:4b:c5:47:
                    b3:8c:c6:34:ba:1f:73:75:af:9c:f3:8a:5f:27:fd:
                    fa:8d:7a:68:39:15:50:11:c3:cf:3f:2f:79:b8:42:
                    11:75:2a:17:17:30:70:e6:71:5c:1f:9f:44:5a:d0:
                    98:2e:20:87:65:c9:65:02:a9:f2:24:67:58:46:bf:
                    f3:88:b8:6a:8c:c5:7e:e1:26:1c:4b:ef:ed:19:16:
                    cc:8f:1c:42:22:d8:75:5c:b3:60:0a:39:e2:e3:47:
                    ea:2c:b3:a1:9b:96:81:33:56:06:f1:fd:dd:87:12:
                    10:a3:cf:66:e5:05:56:55:27:b0:9e:1b:fc:63:35:
                    45:d6:bb:25:91:17:e4:3a:52:75:51:4b:dd:a7:fc:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FF:0A:65:70:82:39:9E:E0:8F:77:69:9C:FF:DB:9A:24:72:74:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/7afb3ded-1466-3539-af35-d9cadb2acd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:84:1e:49:c1:65:50:af:1b:25:d5:9e:b6:e7:44:79:f8:
         85:6e:d8:6f:03:d8:eb:da:2d:a4:28:d5:e6:a3:8d:40:cf:26:
         29:9d:35:8c:a6:9b:49:78:15:41:de:4a:39:e1:c5:eb:ac:80:
         54:34:25:25:ef:4a:1f:59:05:de:cf:3a:72:ee:72:e2:53:7f:
         91:f4:8e:96:5f:b5:72:cc:b3:e4:56:b9:cc:8f:3c:26:23:5b:
         b6:16:3b:62:eb:fc:96:9b:ec:77:10:45:5e:a0:78:91:46:a9:
         4e:11:9c:13:92:6e:fc:99:ea:f8:21:a6:61:1b:04:b4:b7:78:
         6b:3a:c3:08:44:57:d9:cb:6e:c2:a1:61:9b:db:3a:3e:71:41:
         52:27:a8:46:75:d5:4c:0f:9a:78:61:46:98:f8:44:14:cc:a8:
         c8:60:28:90:c2:0d:3c:e6:63:49:79:9f:f8:a5:e9:d5:8a:bf:
         7d:ff:72:66:70:f2:ba:ed:fe:4c:8b:8c:8a:f3:cf:a8:28:55:
         15:85:da:c4:09:cc:9d:4a:55:61:22:75:f9:55:36:96:65:e5:
         f8:e9:f4:dc:32:96:15:df:fa:9f:1b:20:70:1d:55:11:7e:e6:
         cc:c0:1e:8c:6a:5e:56:5e:99:43:0a:22:ea:d6:40:d2:aa:02:
         e0:1a:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:04:29 2025 by rpki-client