Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa
File:                     a9452a88-6ebc-3d4c-8810-c191bce079bd.roa (raw, json)
Hash identifier:          ur2WStux4hUFpT9MuBqfALSwYAsVypCCt8c/ny5oYqg=
Subject key identifier:   B5:FA:00:23:32:89:C5:E0:BF:D5:EA:BF:B6:53:6C:54:CD:49:88:FE
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584AA42B845ADBD061A038C83900
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        209.169.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:84:5a:db:d0:61:a0:38:c8:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=edccd206-0114-4bef-910e-8bd991a4b117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:96:69:7f:8c:e9:59:28:ca:f6:7a:3d:ef:
                    6c:5a:50:af:d4:15:c5:5d:3b:2f:d9:2f:65:eb:0d:
                    ff:c8:ab:12:92:cb:47:59:0a:5e:27:d3:48:a8:1f:
                    97:5d:0d:7b:13:b5:47:f5:78:38:ab:74:72:89:8c:
                    b1:21:3c:a8:0a:e5:a8:68:a1:c4:0b:e4:f9:91:0e:
                    c2:53:42:a2:00:69:af:ce:6e:05:65:c2:f4:50:03:
                    b4:24:ed:b9:f7:8a:16:c4:f1:7d:80:c2:d5:ed:a4:
                    b2:1d:be:b7:cd:1d:2b:18:4c:9a:5b:90:96:e7:73:
                    60:4f:36:d0:33:e9:6a:cb:89:8d:24:46:82:41:9f:
                    a9:1f:fe:7c:b1:a8:92:77:b9:74:6b:9d:19:8f:89:
                    8a:ff:b7:1c:76:38:3d:e7:a8:7c:07:fd:4a:26:d9:
                    98:21:50:cc:68:ad:c5:3e:b6:f4:e8:f8:e7:02:c3:
                    0c:17:48:86:03:65:3f:60:b2:bd:f9:8e:e0:47:89:
                    c7:eb:a2:0f:aa:15:c3:47:fd:2d:4f:38:90:43:91:
                    25:77:ec:f4:fc:c9:30:cd:8e:9d:47:80:82:26:dc:
                    c2:9f:42:22:db:cd:13:54:34:e3:91:17:d2:82:16:
                    97:d8:a1:4e:1f:8b:da:47:7c:10:b2:2f:73:db:5e:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FA:00:23:32:89:C5:E0:BF:D5:EA:BF:B6:53:6C:54:CD:49:88:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:13:92:a6:bd:bc:78:5d:04:76:ae:60:20:fc:1b:d6:0a:b9:
         20:c3:bb:7a:b4:73:9b:97:83:f6:8d:a4:f6:de:61:88:44:c3:
         ef:8d:3c:8a:cc:9b:2f:f1:f1:07:64:f4:08:fa:ee:9f:7f:5c:
         31:1e:11:bb:b6:84:cb:e9:55:bd:88:1e:d9:3f:84:8b:28:54:
         2c:a2:89:db:f4:49:10:98:4e:ff:e8:72:42:a5:91:61:c6:a7:
         f9:ae:17:8e:7b:df:4e:26:14:21:c1:0a:01:0f:2f:89:f5:e0:
         e1:0f:5b:a3:fc:10:d7:f9:0b:80:6a:4b:1c:b3:f0:ab:7c:29:
         8a:8b:dc:ba:f7:72:dd:f9:6b:e7:11:a0:27:93:b4:15:b1:d4:
         ca:51:23:d6:48:8f:9d:96:c1:5b:81:9f:97:6d:5d:24:d6:95:
         71:a5:a5:d1:95:c2:97:59:35:e1:65:df:e2:ab:ee:fa:bb:c0:
         bd:6f:98:7b:3f:b1:e0:61:b9:d6:0f:3d:b6:73:23:3d:e4:92:
         c0:ee:6c:30:d4:88:54:7c:97:81:6d:ff:7a:e6:ee:6d:30:0c:
         24:9d:b5:73:b7:23:db:66:8c:33:6b:51:86:53:79:17:84:3d:
         d5:72:ae:97:78:a7:56:fb:85:59:5a:6c:f8:98:91:f9:4d:f4:
         2f:b7:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:12 2025 by rpki-client