Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
File:                     01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa (raw, json)
Hash identifier:          R2aAbzaeXc+gTaup+lQ4PV3ZHEWCxlDZS8fhetsxAnE=
Subject key identifier:   9C:3B:A5:22:54:60:E3:CE:C3:07:BF:C2:04:39:4B:60:CB:D8:35:82
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F4328584AAB2668CE29317BC6E8B4F780
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     399337
IP address blocks:        209.151.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:68:ce:29:31:7b:c6:e8:b4:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=b08c92fd-e679-4100-972c-43a716d0ef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:f6:16:4d:ab:8a:bc:b5:84:dd:e7:88:9b:
                    e7:8e:a3:fb:d1:fe:fa:d1:ca:a5:10:15:bc:50:54:
                    8a:b4:a2:f5:95:3d:79:7f:31:f8:7f:bf:16:01:6d:
                    96:be:5a:2a:b1:23:24:60:4a:96:18:79:98:7c:a6:
                    0b:7c:b1:e5:bf:df:93:b8:e0:31:29:eb:50:f0:33:
                    a8:0d:d3:57:bb:f9:54:8b:41:e3:e9:34:cd:a4:ee:
                    96:eb:1f:71:e1:69:9c:35:ea:b8:24:9e:61:99:24:
                    62:6d:88:8f:81:c8:d2:bd:36:6d:ec:13:91:61:4f:
                    47:89:7c:32:3b:8a:ad:06:75:08:ab:2e:d4:42:1e:
                    bc:79:32:94:c7:39:35:26:4a:91:d1:48:e3:96:cc:
                    d2:3e:e2:6e:ce:d1:18:ce:c7:07:bb:ab:e3:d2:b5:
                    32:41:08:ba:16:db:91:f9:71:ec:9b:04:0c:60:a7:
                    7b:ff:8c:24:96:f4:32:3f:d4:a6:1c:c7:9c:ea:04:
                    e7:ca:c4:33:71:2c:75:b7:b7:3b:d3:fc:76:e7:aa:
                    d9:0c:b3:94:ee:15:79:8f:e6:76:5d:4f:e3:0d:a1:
                    d7:cf:4f:85:ba:98:f4:61:23:d9:25:96:30:96:db:
                    69:e7:c3:84:d5:cc:0e:25:66:d9:6d:a6:2a:9e:19:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3B:A5:22:54:60:E3:CE:C3:07:BF:C2:04:39:4B:60:CB:D8:35:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:e2:c6:4e:8c:9d:4a:15:a7:24:23:1d:20:12:ad:39:84:
         93:e5:c8:01:81:0b:2e:42:9f:ff:7f:fb:fe:ea:3e:b9:5f:a4:
         b1:43:69:32:fe:45:0e:8c:ee:a6:c2:50:2c:9f:db:46:85:97:
         66:ff:37:5e:28:cb:3c:fe:11:7a:b5:cf:6a:49:3d:f9:e7:26:
         91:46:c1:2f:1f:da:ba:2e:14:90:fa:cb:d9:57:9c:9b:60:14:
         4f:7e:f8:bb:eb:c8:22:5c:19:02:14:98:de:02:a9:25:31:14:
         2b:91:3a:4c:eb:10:07:a3:15:b6:13:ba:f9:5a:cd:a7:bf:b4:
         56:cc:30:85:52:18:ee:8b:f8:de:5a:80:98:9b:d2:d6:1a:18:
         ce:53:d3:72:63:9d:96:38:b2:df:1c:c7:b9:99:60:55:c0:ad:
         50:fc:2b:60:7b:18:ca:08:50:0c:0a:eb:c1:41:a3:63:43:d6:
         a2:6a:ec:9d:29:cb:89:33:f0:0c:34:92:18:b9:d0:13:84:a5:
         c5:8f:05:fc:3f:f7:8a:be:57:da:13:73:e7:f3:67:d7:6a:17:
         68:f5:76:07:14:a8:0a:2c:14:0e:53:63:1c:66:9d:43:3f:25:
         e4:d3:0a:7a:09:c0:20:a4:af:26:02:54:9e:6f:e3:04:7e:90:
         52:29:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:30 2025 by rpki-client