Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa
File:                     59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa (raw, json)
Hash identifier:          A7zMEX9nS30BrzWWmz6MiRE2GRib6kaitoq2/qa0qo8=
Subject key identifier:   BD:E8:AC:55:50:1B:84:F4:44:FA:3F:A3:A9:4C:7D:13:FC:1D:E5:3C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849DB8E844CA2E7022A23D9D4F2
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa
Signing time:             Thu 15 May 2025 04:23:00 +0000
ROA not before:           Thu 15 May 2025 04:23:00 +0000
ROA not after:            Wed 13 Aug 2025 04:23:00 +0000
asID:                     46450
IP address blocks:        209.20.134.0/24 maxlen: 24
                          209.20.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:8e:84:4c:a2:e7:02:2a:23:d9:d4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 04:23:00 2025 GMT
            Not After : Aug 13 04:23:00 2025 GMT
        Subject: CN=2f270d23-552d-4616-a625-83d833e9df0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:b5:1d:8b:20:93:de:db:32:93:e5:10:09:
                    5b:4f:4f:43:34:f0:6a:ba:5d:df:be:5e:1f:3c:65:
                    3d:af:9b:c9:78:e7:ab:1e:22:3c:a3:6b:b3:a9:43:
                    13:f7:d2:5b:bc:09:a3:3e:a6:0b:d0:0d:42:1a:5d:
                    83:36:07:44:42:88:78:47:2d:0b:93:31:6a:3c:7e:
                    e9:19:e4:d0:d6:3e:31:7b:a0:b3:4c:02:30:7d:72:
                    7d:41:dd:7d:0c:16:b8:d4:70:14:a2:2f:a9:a2:bf:
                    e5:da:29:6c:e5:f8:95:f6:af:5d:2f:4d:77:cb:45:
                    5d:71:5f:07:9c:01:6d:de:cd:a5:c0:1c:70:4a:d8:
                    71:51:d4:0e:f7:4a:47:c2:14:c6:81:35:36:26:85:
                    c4:88:27:ca:31:ee:d0:e3:fd:96:fb:80:a7:58:fa:
                    87:f3:cf:c8:ba:9c:de:af:61:f9:87:30:d8:87:b9:
                    df:4c:61:9d:2d:d8:2c:f2:2d:eb:fc:56:29:ba:f4:
                    fe:c5:81:fb:c1:54:93:79:87:99:9e:1d:5f:a7:39:
                    eb:a8:f5:35:01:a2:73:9f:a3:51:d3:05:eb:ed:70:
                    dc:31:8f:a3:e4:77:b7:5e:1f:11:f9:29:b0:aa:ff:
                    2f:08:cc:72:82:51:63:e1:3f:6e:c6:25:1c:76:a0:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:AC:55:50:1B:84:F4:44:FA:3F:A3:A9:4C:7D:13:FC:1D:E5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.20.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:60:e9:2c:1d:6d:71:e8:59:ed:4e:6f:5f:ef:75:dc:21:
         8c:2a:6a:6c:cb:85:bf:a3:1f:ee:a4:c5:63:5a:ea:93:2c:da:
         6e:2f:8a:a0:2f:b1:04:2e:8e:71:3b:83:39:60:0b:f7:c5:fc:
         04:1a:6e:9e:29:6f:f1:7e:03:4b:d4:62:68:10:a3:b8:a4:46:
         8d:5d:09:01:3b:32:c6:2c:ed:51:7c:8c:e3:3f:06:e8:a8:08:
         76:e5:66:56:ee:fa:34:2c:83:9f:68:3e:7e:5c:15:91:cb:6f:
         0c:d5:cc:87:af:27:bb:ad:92:53:78:3c:ec:21:0e:b6:04:5c:
         06:6a:9c:29:83:31:c2:05:8b:e6:27:f1:6a:8f:05:ee:e7:d9:
         19:5d:53:f4:47:c3:f2:5b:24:78:37:73:ff:1a:6c:78:84:31:
         2b:76:dc:0c:3b:c8:ba:20:0d:65:82:89:8d:b3:ea:64:9b:fe:
         f2:67:45:98:c1:91:fb:17:a9:12:e3:f6:07:27:cb:9f:e6:4b:
         4a:25:c2:8d:19:0b:48:7b:2b:7a:ab:47:7a:01:17:c1:36:e1:
         ff:49:fa:4e:b8:ea:76:8a:55:31:12:60:22:bd:9e:11:02:85:
         18:43:99:d3:54:12:12:df:5f:a0:c0:ba:86:27:df:f9:f9:b9:
         f1:98:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:09 2025 by rpki-client