Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa
File:                     b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa (raw, json)
Hash identifier:          yhhanUXIE4niPj6pyocT5+gvULy38wbiCbbqmfuWPRw=
Subject key identifier:   D7:66:AF:B1:DF:F2:EB:AD:D9:00:A7:6B:8B:4B:82:7D:A9:8B:56:19
Certificate issuer:       /CN=883ca040-a898-4e47-b1e1-f2461996a058
Certificate serial:       010D0C9F4328584A17E17804E3DCF3F7EB84F380
Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa
Signing time:             Thu 05 Jun 2025 18:58:39 +0000
ROA not before:           Thu 05 Jun 2025 18:58:39 +0000
ROA not after:            Wed 03 Sep 2025 18:58:39 +0000
asID:                     36858
IP address blocks:        209.189.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:e1:78:04:e3:dc:f3:f7:eb:84:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058
        Validity
            Not Before: Jun  5 18:58:39 2025 GMT
            Not After : Sep  3 18:58:39 2025 GMT
        Subject: CN=783249ed-e0d3-4c9e-9de0-85c6e9d376e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:86:fa:63:31:43:37:ae:19:26:99:97:8f:
                    5a:32:08:c3:a3:43:37:01:a4:e2:d0:66:61:87:46:
                    78:40:2a:69:35:7f:21:7f:67:6f:56:c6:8e:96:83:
                    2c:ae:2a:bd:23:3d:96:58:9a:55:7d:fc:ef:c9:f4:
                    88:4c:b1:01:d6:16:33:89:29:b8:06:c0:32:54:b2:
                    5d:99:57:2f:a6:54:18:7e:90:7f:a8:c8:91:36:3f:
                    ef:f0:30:7a:af:51:03:75:96:bb:c2:90:2d:1e:ab:
                    62:f9:0e:28:d0:61:48:c5:bf:2d:67:44:20:a4:73:
                    36:00:86:39:65:0c:5d:d5:ac:b6:7c:9e:3d:e5:ef:
                    b5:70:03:f2:d3:29:09:35:8c:69:f0:d6:6b:92:84:
                    91:3b:9f:44:b6:d4:c6:d6:5b:ab:f7:59:75:84:f0:
                    03:cc:4d:c5:31:72:85:1c:90:e5:0a:0f:8d:b4:d2:
                    0c:d3:f8:ec:a0:11:5f:2c:67:0d:0b:55:68:e0:ce:
                    ae:14:4f:01:1c:12:be:e5:e1:0c:ed:a5:2b:78:28:
                    7f:ad:b1:a8:9d:a3:94:28:36:41:56:dc:e7:f1:18:
                    14:74:a7:67:7b:37:be:df:fd:5f:c1:f1:a7:03:6d:
                    6a:c1:0e:e1:dd:ec:78:48:51:ab:7b:0c:6d:b8:6c:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:AF:B1:DF:F2:EB:AD:D9:00:A7:6B:8B:4B:82:7D:A9:8B:56:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.189.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:74:61:6d:ce:6a:96:33:d5:00:f7:a8:e3:8a:ab:3e:e4:26:
         8e:8a:ee:b5:a9:6d:99:fb:cd:d0:ff:30:24:f1:9c:86:bb:a0:
         1e:d2:53:e7:b3:30:3c:f8:74:fa:3d:4a:5a:74:92:7e:47:23:
         5b:4e:d9:86:28:b9:e1:d4:4a:ea:9e:99:b5:6c:ee:a7:cc:4a:
         49:0d:8b:e7:9e:a8:ad:61:c8:fa:86:c0:c6:ac:d2:b8:29:4e:
         b2:73:66:9f:7c:6e:ff:94:30:0f:dd:c6:e6:4e:ab:73:d4:45:
         cb:a7:93:f5:ec:fd:f8:62:be:bb:4d:44:aa:81:71:c0:04:90:
         45:6f:f5:ed:e3:6a:3b:85:a9:20:18:5d:64:79:8a:d7:42:a5:
         a9:ec:b2:e6:80:f6:2e:1e:f1:39:16:bf:40:9f:be:a7:cc:0e:
         a9:72:87:30:30:9e:39:38:a1:a6:f2:78:cf:ec:42:ea:73:69:
         5a:39:5b:72:d8:1d:a7:b7:77:c4:35:1b:86:40:c6:f4:e0:45:
         4f:e4:86:0c:07:83:a2:f7:ac:cb:0e:47:82:3d:95:c5:b0:b3:
         9b:ef:12:b2:53:50:c1:4d:96:5b:da:3f:4d:14:ba:42:f5:8b:
         37:dc:7c:2a:c1:92:23:76:8d:1f:df:79:bf:35:d0:d0:69:98:
         96:89:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:14:35 2025 by rpki-client