Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa
File:                     b669b545-6455-356d-9552-6f650359ccf1.roa (raw, json)
Hash identifier:          sd1R9TjGkIrUnJYkjAuJCc4BW68N3E0tbIWKF3n7A0k=
Subject key identifier:   EC:B3:3B:69:6B:83:55:EF:69:3D:EA:D0:5C:05:44:5F:B8:75:23:EB
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A0D6A81E436E4A3B605FDDD80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     12189
IP address blocks:        209.51.128.0/24 maxlen: 24
                          209.51.134.0/24 maxlen: 24
                          209.51.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:81:e4:36:e4:a3:b6:05:fd:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=98f853ff-a4c1-4054-a61d-f5b30c7785d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:21:86:32:70:6d:f3:c1:c5:44:2c:86:4c:
                    6c:ab:2f:5d:c1:bd:6a:07:f1:20:1d:55:59:1d:83:
                    7c:c1:1e:47:64:68:03:69:b9:ab:c8:b9:22:79:90:
                    cb:74:79:98:cc:ce:4d:17:46:34:e9:2b:f3:e0:58:
                    c8:ec:b0:c1:79:bd:f8:e6:cb:3e:38:85:bb:54:8b:
                    b1:fc:17:85:ba:5e:79:ba:d0:c2:89:70:13:52:47:
                    41:bc:44:82:f5:b7:6c:32:cc:1f:05:cb:74:2f:c5:
                    6a:aa:9a:1b:73:af:00:6c:c7:39:fc:11:46:63:e8:
                    37:24:73:ac:1f:bd:9d:5b:11:34:7d:f2:30:ab:c2:
                    40:33:ff:a1:a8:00:4d:22:06:1c:ec:79:0b:7c:23:
                    72:75:b7:25:ac:f1:8c:94:90:53:c6:a8:bd:3f:8a:
                    be:ce:e2:35:f6:37:cd:43:17:9a:52:83:e8:60:8e:
                    33:2e:99:c9:0f:ff:6e:7e:bb:4b:12:21:55:dd:81:
                    17:f4:fd:d7:d2:a9:ac:a6:24:47:c1:fc:96:49:bf:
                    67:6c:30:da:dc:6a:17:a0:a5:5a:6a:0c:10:97:46:
                    08:bf:49:e8:0c:8a:70:3c:6b:f3:b1:2e:06:bb:49:
                    69:33:6e:98:89:8c:b3:e1:e9:69:92:71:b7:1f:67:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:3B:69:6B:83:55:EF:69:3D:EA:D0:5C:05:44:5F:B8:75:23:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.128.0/24
                  209.51.134.0/24
                  209.51.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:7e:d6:69:c9:53:8e:b6:ba:f7:35:76:51:34:e0:de:43:
         ff:50:64:ea:5f:c6:d5:c3:ab:ad:3a:43:da:a8:35:ec:b2:c4:
         26:65:71:c6:d8:aa:8e:e8:ae:82:ca:e6:eb:d7:1c:7c:e4:ee:
         13:73:94:31:79:ef:13:75:d3:c0:b8:d0:be:cf:e0:e9:40:39:
         7c:5a:d5:94:8b:61:bc:e9:0a:9c:96:01:fb:6e:62:b4:90:15:
         05:e1:cc:31:dc:6f:62:59:67:eb:e4:e7:ad:c7:f8:71:69:c1:
         87:b4:26:b2:52:66:8d:db:4a:1a:6a:77:b5:82:10:ab:65:5a:
         1b:9a:e2:05:65:f4:0d:fc:47:78:32:5a:a8:63:3a:5b:84:37:
         94:8b:02:6d:02:7e:d5:a7:cb:4a:48:d2:7b:c4:15:f0:ec:cf:
         1f:4e:20:28:a4:32:3b:d3:05:fe:40:e5:4d:81:93:8f:a6:c9:
         21:20:ed:04:6e:22:d6:d0:6b:7b:a5:8a:03:66:6b:4b:b5:b6:
         61:cb:f1:ac:0b:97:dd:c4:18:9f:0f:43:0d:e5:fc:ea:18:b9:
         0a:62:3c:63:cc:43:c0:db:ed:18:66:36:0f:22:f9:ff:38:7a:
         e0:15:ad:c3:a8:f7:79:0f:bb:8c:0b:4b:94:f4:98:be:c4:07:
         52:8f:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:28:16 2025 by rpki-client