Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa
File:                     9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa (raw, json)
Hash identifier:          8tu7A07ZeMdbcsixZN4Mq/z8T8K4N1yWjg6aSv6SyBY=
Subject key identifier:   6C:62:79:54:BB:EA:45:58:1D:E6:77:AE:FD:50:66:EF:B2:42:DF:C5
Certificate issuer:       /CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
Certificate serial:       010D0C9F4328584A20F54C4A3D795F690ABE1F40
Authority key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa
Signing time:             Mon 09 Jun 2025 01:00:50 +0000
ROA not before:           Mon 09 Jun 2025 01:00:50 +0000
ROA not after:            Sun 07 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        192.35.85.0/24 maxlen: 24
                          192.52.228.0/24 maxlen: 24
                          199.71.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:20:f5:4c:4a:3d:79:5f:69:0a:be:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
        Validity
            Not Before: Jun  9 01:00:50 2025 GMT
            Not After : Sep  7 01:00:50 2025 GMT
        Subject: CN=3079ea79-b5c5-4eca-b7af-1a747a44404c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:ae:bd:f8:7a:8f:2a:95:7f:64:b1:c4:03:
                    87:67:c2:63:64:24:85:99:5a:76:26:f4:91:a6:09:
                    96:16:2f:8e:b1:f5:9a:58:75:e6:0d:dd:33:65:65:
                    9d:a9:a1:18:e1:c3:54:dc:de:a9:bd:4a:ef:70:15:
                    2c:7a:f5:ea:3d:8d:d0:d7:15:03:09:71:b1:f3:1d:
                    77:6a:47:86:38:78:b7:15:1e:f6:4b:d3:87:80:fd:
                    30:23:30:07:25:76:2d:a7:68:4d:2e:b8:9d:f7:65:
                    62:a3:18:a5:55:9d:2f:eb:a9:0a:cf:3f:bf:36:9b:
                    49:f3:a9:b3:3d:9b:37:19:e9:24:a4:61:94:0f:a9:
                    d9:34:3f:6a:3a:12:d0:a6:ed:a0:00:af:95:4b:72:
                    35:ee:7d:32:98:71:7c:b2:6d:5a:6f:41:92:b9:d8:
                    df:76:6c:06:d2:49:e2:f4:1b:f2:5d:55:9c:62:f9:
                    87:b0:da:ac:61:5e:8a:a3:b4:01:6d:08:77:05:24:
                    d2:44:fe:c2:64:0b:40:23:74:a2:c1:24:8b:79:07:
                    85:24:ae:9a:26:56:50:48:4f:aa:31:15:6b:22:86:
                    2d:31:d3:7f:a9:6e:30:8f:35:55:4a:5b:5b:ea:76:
                    c7:63:40:b2:57:de:13:e4:74:37:d6:9a:a9:50:b8:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:62:79:54:BB:EA:45:58:1D:E6:77:AE:FD:50:66:EF:B2:42:DF:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl

            X509v3 Authority Key Identifier:
                keyid:C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.85.0/24
                  192.52.228.0/24
                  199.71.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:79:a3:f4:4e:85:5d:d4:90:8c:eb:38:65:98:a2:6a:15:3e:
         ff:e6:91:00:b7:81:c5:e6:aa:e2:46:8f:c9:03:12:30:19:13:
         28:28:2c:44:97:a0:a9:ea:48:00:4f:96:3b:85:b8:af:dd:d0:
         7b:cf:4c:77:73:cb:40:c8:f7:9a:23:11:38:09:54:fb:20:92:
         5f:1e:07:2a:db:a8:68:75:e1:97:3b:84:5d:08:f6:6a:3e:e1:
         ae:85:01:25:bd:eb:aa:b9:93:de:20:67:32:d7:3b:25:85:97:
         08:71:36:35:dc:1b:20:db:58:bf:a2:29:dd:81:63:29:4a:fb:
         50:3a:ad:ef:8d:c2:28:2b:86:10:c3:a8:84:fb:ed:8d:9b:d6:
         6b:1f:de:2f:9e:e1:7c:16:e9:ee:7c:82:db:cc:e2:d0:79:c5:
         ff:2b:3e:44:38:9c:5b:4c:62:ac:03:c7:5a:9d:c1:eb:9b:2d:
         df:59:7c:59:59:dc:59:b2:97:d2:99:3e:22:c1:b5:a3:3e:a7:
         ac:69:50:f2:ce:7a:dd:d3:e6:60:6f:fd:9d:ac:21:f4:5e:e3:
         aa:f9:88:96:29:19:a6:7a:83:4a:d4:60:07:ac:73:91:36:6c:
         da:82:8c:d6:dc:54:34:55:ec:70:db:a0:6c:bb:59:14:86:8c:
         50:3d:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:12 2025 by rpki-client