Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
File:                     36766eed-ee8a-3083-8823-23777bfe75b3.roa (raw, json)
Hash identifier:          CPeGxqyNUdcSDMq1wqL1MDrkHZQ8tDqR1XksmfdC/00=
Subject key identifier:   AB:52:34:94:74:6B:D7:89:C2:2D:A2:4A:4A:B8:19:21:A9:D4:14:A6
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F43285849E2251BE61A7A310A3F6625C0
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        209.160.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1b:e6:1a:7a:31:0a:3f:66:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=f8b0ba99-ced7-4213-9286-0d5659220315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:ea:da:dd:fd:02:77:c7:2d:f2:99:dd:9e:
                    40:d0:63:fc:96:06:8d:8e:7c:69:7b:07:10:ca:77:
                    71:bd:98:b3:15:dc:aa:00:7a:9a:d9:3e:7a:0e:91:
                    38:13:c5:fa:d9:a8:79:c1:d7:4b:38:ea:ce:8f:da:
                    27:07:d5:17:66:03:82:e2:51:e0:e8:b8:ad:11:e4:
                    f2:2c:51:fa:ce:34:b7:f9:15:e8:98:67:96:d9:6a:
                    96:aa:0a:70:21:45:94:47:7d:3f:d9:fa:ea:a3:8b:
                    02:46:57:a3:2f:5a:67:fb:bb:7a:f6:1b:f6:50:40:
                    03:1e:56:b2:e6:db:68:ee:bf:0b:cc:07:e8:11:a3:
                    19:7f:ea:a4:31:5a:53:2f:88:d2:b8:b0:40:51:bb:
                    eb:48:78:cc:a2:e2:2c:e4:3b:e2:3e:46:6d:73:bf:
                    bf:a0:36:80:b4:8c:ec:2f:b3:5e:19:6b:10:c7:70:
                    81:ab:00:a6:66:47:7a:35:33:fb:8b:f7:d7:59:e8:
                    80:9f:c0:a9:ea:ff:38:24:1b:4f:76:71:1c:ea:f2:
                    68:56:0e:2a:6b:8e:48:c9:d4:84:3e:a9:58:ea:4e:
                    67:13:a5:28:45:8a:78:46:ef:f0:65:63:fb:34:11:
                    dc:29:d4:25:fc:43:cb:90:24:6a:71:43:f5:76:58:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:34:94:74:6B:D7:89:C2:2D:A2:4A:4A:B8:19:21:A9:D4:14:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:42:4c:fd:df:64:29:5b:4a:86:8c:90:97:7b:e0:ab:71:
         bf:fb:2a:f6:13:88:7d:9d:42:e2:97:b1:ad:03:f7:f7:48:fc:
         07:33:4d:0e:f0:6e:da:a8:62:6b:29:f1:5b:f3:76:3e:2b:5c:
         a7:7d:24:e7:53:bf:2a:3d:43:a1:12:f4:0c:49:55:d5:59:9d:
         ae:3d:dd:7a:b6:d2:fe:42:49:e3:1a:35:f6:71:6d:c0:50:23:
         96:4b:50:17:9f:a7:88:b2:50:0b:62:b0:3f:b6:58:72:fa:4c:
         e7:f3:d6:d9:c2:11:7b:1a:b9:07:6b:8a:de:fd:eb:40:d9:6b:
         ac:ad:f1:ca:89:f6:0d:20:d9:cf:9b:1e:c1:ac:2a:37:2b:20:
         2f:5e:8e:71:c4:eb:f7:63:c6:e0:76:22:63:81:73:17:95:cd:
         03:ec:0e:16:35:f8:3e:70:dc:2e:9b:77:c3:06:1d:9d:8a:1f:
         cd:7d:2e:77:1e:c0:a3:ad:ac:18:20:da:b9:7e:48:0b:d9:9e:
         9b:40:79:2f:38:04:de:ac:8b:9b:85:fe:e1:76:b7:6f:79:2e:
         5e:1f:ba:e3:4e:69:82:e0:9d:8c:54:6b:3f:ef:fc:e8:6b:6c:
         05:b7:2e:30:7b:7d:55:49:af:fa:4c:ac:8a:ff:1c:d2:61:fc:
         76:44:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:15:44 2025 by rpki-client