Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa
File:                     f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa (raw, json)
Hash identifier:          2i0t37hI9CvfdKJzhX7UXQrC7QuR9yQPk4A4ZbxIZo8=
Subject key identifier:   F6:E5:0A:A1:C7:05:C1:70:50:68:9F:44:00:CA:AE:51:54:2A:7D:49
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285849D594EC176D3A45B9B0A40D00
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        134.65.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ec:17:6d:3a:45:b9:b0:a4:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=569c9669-bd87-4715-9c67-d43b60e956d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:6d:15:13:09:d3:45:90:5a:de:c2:81:0a:
                    4a:55:48:c5:fb:41:fb:a0:c9:78:6b:38:4a:a3:61:
                    a5:fd:04:51:7b:12:de:07:5c:eb:af:32:bc:2a:df:
                    f6:cd:75:9e:11:ad:12:1c:67:dd:d6:7c:ff:34:8d:
                    0d:41:c3:f6:76:26:e5:36:f8:e1:a5:bc:a0:01:f8:
                    1d:66:d5:4c:a0:49:90:43:20:f9:0f:da:3b:ca:f2:
                    a3:0b:15:c6:5a:65:db:0f:9a:98:e2:c8:9f:6d:b1:
                    6d:9b:c4:dd:8d:cc:fd:c4:fa:b7:1a:bd:75:c0:9f:
                    18:dd:af:cb:f5:25:cc:a6:25:3e:fe:0c:26:08:89:
                    9d:97:95:26:9d:c4:a6:c0:39:fc:2b:46:64:4e:1b:
                    b6:5a:ab:c0:55:36:ae:42:51:6a:9a:65:49:06:24:
                    81:34:d0:27:73:ab:5c:39:7b:ee:bc:18:44:46:19:
                    8b:57:98:58:b6:39:9e:60:41:dd:79:0b:c8:1a:cc:
                    dc:26:f4:19:a3:22:f8:f7:d2:5a:01:11:31:69:58:
                    b4:e5:9c:8c:b5:45:c8:20:b3:d8:6f:87:39:9f:fd:
                    c7:6b:d8:05:38:06:46:7a:32:3b:0c:e2:56:2f:0d:
                    3b:b4:3f:bb:90:2c:62:22:7f:23:96:b5:5a:16:e9:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:0A:A1:C7:05:C1:70:50:68:9F:44:00:CA:AE:51:54:2A:7D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b6:92:6b:62:a6:56:a8:97:c2:74:cf:6c:a3:26:11:b1:47:
         57:1e:c3:8e:1f:f4:ab:e7:f4:95:94:18:f4:fe:5f:ff:82:62:
         50:65:24:26:05:64:50:ab:0f:eb:68:2a:b4:12:27:a4:a0:f8:
         bf:cc:af:c7:7b:b0:73:5a:79:7b:7f:8b:d1:b6:5d:dc:8d:f6:
         09:64:a2:82:3f:34:95:d8:ff:f0:1c:a4:36:3c:7d:cf:4f:ba:
         a3:0f:b6:dc:b4:4a:8c:37:bf:cc:84:07:32:c5:54:28:cd:a3:
         19:72:cd:cb:d0:c6:8e:c0:eb:7e:05:da:53:ce:73:c5:5e:ee:
         1d:9a:4f:39:79:3b:b1:33:0e:fb:ef:7f:7c:a4:b8:85:30:ab:
         e6:49:d0:2c:b4:13:64:ed:2b:c9:4b:73:85:6b:7e:e8:b9:ed:
         b5:dc:91:e0:29:84:2d:0b:21:c8:cb:45:65:34:3c:c4:48:83:
         e0:16:d9:6f:f4:a2:ee:37:24:c0:d6:b4:5b:1d:9b:b2:cc:38:
         78:cb:3a:88:c0:84:d2:72:81:55:3b:f6:d6:e0:67:ac:81:01:
         11:4e:f5:b0:ec:10:ed:e3:09:16:48:81:eb:5f:7b:e6:a6:68:
         52:54:e3:40:f4:e6:ba:cf:17:05:6c:6e:29:29:de:b2:ef:a7:
         cc:32:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:27:57 2025 by rpki-client