Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa
File:                     f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa (raw, json)
Hash identifier:          RwL8P4fE2BpCghDShncOUf9BxE0ZdivU0+72OLXX33c=
Subject key identifier:   46:F6:CE:48:63:15:6B:88:CF:EF:25:48:EA:9C:93:18:9C:9E:7F:92
Certificate issuer:       /CN=21bc3777-de7d-4aed-88bc-9c652ed17843
Certificate serial:       010D0C9F4328584A8CD406794530D94A99230580
Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa
Signing time:             Thu 17 Jul 2025 16:20:25 +0000
ROA not before:           Thu 17 Jul 2025 16:20:25 +0000
ROA not after:            Wed 15 Oct 2025 16:20:25 +0000
asID:                     46188
IP address blocks:        199.21.176.0/22 maxlen: 22
                          199.45.28.0/22 maxlen: 22
                          208.93.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:d4:06:79:45:30:d9:4a:99:23:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843
        Validity
            Not Before: Jul 17 16:20:25 2025 GMT
            Not After : Oct 15 16:20:25 2025 GMT
        Subject: CN=779429e5-9869-4842-8a8a-83496756d79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:9c:c4:ed:4d:54:d3:1f:1b:6f:fa:db:4b:
                    85:35:ce:68:b6:04:81:4b:4b:49:5d:e4:0b:17:4f:
                    c7:2d:fb:77:9b:e3:d0:ed:53:ea:bd:13:17:67:8e:
                    37:c3:c9:1e:d9:d5:a4:94:59:b7:29:7e:78:7b:9f:
                    f2:33:2a:26:10:f4:22:bb:23:d1:b8:c5:b6:01:3c:
                    49:3d:61:1d:dd:c1:5e:7f:bb:5c:c5:9a:6f:b2:74:
                    aa:4a:0b:a0:41:b5:34:c8:97:e5:47:2f:ea:16:90:
                    e4:5c:6c:63:5e:92:44:34:9d:e3:d7:dc:06:9f:7a:
                    de:b5:3a:90:d3:35:3c:4e:e1:bf:89:b1:f4:63:fb:
                    23:42:e6:9f:16:b1:03:f7:59:65:da:e6:f3:5b:71:
                    af:8c:46:cd:a6:03:8a:53:36:72:35:33:3a:d1:14:
                    70:73:cb:0b:54:1a:72:2d:a6:5b:fc:db:52:c4:ca:
                    af:31:55:bb:b7:8e:55:ed:15:c7:fc:ba:11:26:82:
                    c5:f7:5b:3d:62:77:b9:fb:42:91:34:a3:91:64:ff:
                    8e:c8:3d:9e:9d:d6:a2:75:84:d9:0b:eb:b1:3f:83:
                    1e:ef:89:f0:9b:39:ef:fa:8b:99:fb:df:c7:d2:98:
                    a5:4a:b8:88:33:76:e5:0e:e6:ff:a4:83:1d:a8:32:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:CE:48:63:15:6B:88:CF:EF:25:48:EA:9C:93:18:9C:9E:7F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl

            X509v3 Authority Key Identifier:
                keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.176.0/22
                  199.45.28.0/22
                  208.93.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:c4:ff:c3:72:5b:7f:ff:6d:de:52:ea:5c:f4:80:03:15:
         42:dc:3c:66:12:8b:2b:0b:91:88:28:17:98:11:f8:f6:72:d4:
         b1:05:18:8a:34:d7:f7:38:dd:d6:54:9b:24:b4:c3:c9:34:37:
         34:10:0d:bf:af:0a:18:31:aa:13:06:14:15:b3:eb:a9:7a:90:
         b3:35:0d:ae:8f:fc:c6:75:6d:95:02:23:5e:8a:31:d5:f0:d4:
         2b:2c:01:49:93:b8:75:6d:6c:a9:9e:0a:0b:6b:fe:52:09:c0:
         3f:01:09:72:ac:bf:57:71:ef:b5:b8:4c:71:05:45:77:05:da:
         8e:6a:5a:8e:d9:7f:7a:55:ca:02:5f:af:6b:3d:e5:b6:96:4c:
         77:80:ff:a6:7b:a2:98:a2:43:d9:b9:42:f7:97:ec:96:c0:64:
         ac:a1:c5:d2:52:cf:b2:e8:da:7e:17:9e:07:19:f7:92:b5:24:
         be:29:e9:6b:97:d6:54:0e:07:71:ac:5a:66:4e:08:3d:9d:1f:
         6d:37:57:f8:7f:42:7a:61:90:90:c5:d5:ea:59:56:f6:4b:94:
         bc:ce:bc:43:24:48:e9:a1:d9:87:c4:9a:c1:c9:db:ca:b2:77:
         06:ed:96:3a:56:7b:32:a6:ed:ca:4b:29:b6:a0:16:ff:ee:2c:
         82:05:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:17 2025 by rpki-client