Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/fec37b81-2e78-36fe-92c2-e3d659f3c755.roa
File:                     fec37b81-2e78-36fe-92c2-e3d659f3c755.roa (raw, json)
Hash identifier:          qWe8dWqD6rqYDgO7bQqh974yd7Ola0YnhN/FX1Yx4cw=
Subject key identifier:   8B:E4:6E:C7:37:D6:9C:E3:E9:C5:C4:0B:35:3A:0D:A3:DC:BD:90:FA
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F43285849DD5914DF3CBB27F41EC96240
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/fec37b81-2e78-36fe-92c2-e3d659f3c755.roa
Signing time:             Thu 15 May 2025 19:46:57 +0000
ROA not before:           Thu 15 May 2025 19:46:57 +0000
ROA not after:            Wed 13 Aug 2025 19:46:57 +0000
asID:                     8075
IP address blocks:        199.247.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:59:14:df:3c:bb:27:f4:1e:c9:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: May 15 19:46:57 2025 GMT
            Not After : Aug 13 19:46:57 2025 GMT
        Subject: CN=306a26dd-fab2-4af7-892e-3162ed841fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f4:10:79:4f:81:2e:fb:07:f2:60:2a:28:
                    7a:fc:f1:7f:43:66:4d:6a:24:7d:96:8f:c9:0e:0c:
                    4b:88:00:bd:02:60:fc:9a:cc:e4:41:1e:7e:2d:8c:
                    3a:0e:96:3f:f5:f2:6a:28:db:ff:76:46:21:d0:83:
                    ef:1e:75:33:2c:7d:c0:f0:a2:73:ae:25:de:bd:4e:
                    ec:53:a3:dd:e4:36:fe:82:c2:72:13:96:c9:21:62:
                    3f:04:70:57:62:46:39:7e:03:be:da:bb:42:63:c5:
                    fa:d8:ca:bf:30:cc:1d:51:55:c1:8d:c8:ff:f3:78:
                    9c:af:1c:e1:fa:3c:68:af:c9:d9:81:66:a2:90:52:
                    7d:ce:ca:37:43:0f:d9:af:f3:85:eb:67:9d:77:53:
                    6a:85:c0:42:7b:b5:a7:f6:20:f5:b9:7a:e9:62:4f:
                    f8:90:b5:e0:66:4c:5f:f1:6d:1b:d4:b3:4c:b8:eb:
                    88:e8:e3:5c:cf:3f:cf:26:76:8a:de:7b:a3:83:53:
                    28:8d:52:fd:50:63:39:6c:7f:5b:5b:11:c2:23:60:
                    27:8a:5a:f4:e8:a5:93:31:57:e1:cd:7b:ae:04:e0:
                    a7:e9:7d:8a:e3:ab:d6:3d:85:99:ca:e8:bd:24:3b:
                    2f:bb:57:f1:5d:32:1e:48:7b:a9:c3:47:35:75:ce:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E4:6E:C7:37:D6:9C:E3:E9:C5:C4:0B:35:3A:0D:A3:DC:BD:90:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/fec37b81-2e78-36fe-92c2-e3d659f3c755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c0:a2:d4:8f:47:24:63:90:7f:ab:9e:cd:6f:2d:23:36:cd:
         67:de:05:f1:51:ee:bb:1c:19:36:2d:31:28:be:48:27:97:15:
         6e:5a:47:d9:2e:89:b1:23:55:ca:12:75:2c:ab:19:f4:c0:95:
         34:bd:01:5b:d0:7d:98:97:e1:1e:66:57:26:4d:f5:8a:fa:38:
         96:13:34:be:dc:75:49:af:07:70:04:a4:d7:b7:01:32:0e:b7:
         8d:1d:43:0a:dd:e6:c0:a3:2f:f0:aa:7a:6d:79:0d:de:c1:84:
         3b:27:b4:69:78:be:14:a2:77:3b:a4:bc:bf:7d:22:3a:ad:3c:
         46:f1:d6:9e:97:11:36:1a:30:ef:73:3a:8c:58:f0:18:4c:0a:
         7e:43:3d:58:7d:f8:51:2f:dc:40:4b:c3:2b:8d:02:97:35:ff:
         41:26:b0:4c:43:9e:9a:5d:5d:c3:24:a0:db:5e:db:fe:2f:e7:
         c1:b1:90:a2:87:58:64:01:8c:11:38:e4:02:bd:8b:24:fa:93:
         40:95:3c:cb:b6:a2:4f:ea:76:a9:f2:ab:3d:97:7f:6c:5d:43:
         95:c6:3c:e4:5c:03:6f:2e:8f:d4:1b:52:83:3d:d8:cb:5b:38:
         db:7a:aa:4c:df:63:c1:21:05:c2:ed:e8:f0:e7:b1:b6:8e:32:
         c4:0d:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:54 2025 by rpki-client