Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
File:                     f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa (raw, json)
Hash identifier:          mNtiY2adN1iTtJeB5veCuXIOsgC4bRlWz4MKyz9Qt/8=
Subject key identifier:   6F:79:05:D5:AA:0C:28:AA:D5:37:D1:12:68:4F:58:DF:E5:D1:D7:74
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AB650E1D883633DD4E705CF00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     6597
IP address blocks:        209.8.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e1:d8:83:63:3d:d4:e7:05:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=8f66ca17-4ec8-4a31-80da-b043fcc7958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:dd:16:6b:55:99:bc:af:7a:21:e1:6c:83:
                    f7:c2:3e:36:ae:dc:64:f4:73:bf:9a:0e:34:98:d3:
                    0f:53:94:13:5a:a2:6d:ef:4c:96:62:d5:35:67:9b:
                    3c:bd:fe:eb:9f:22:1e:52:f5:3b:69:7a:79:24:0b:
                    64:15:6b:00:81:2d:e7:4e:ab:6a:50:ef:5c:88:45:
                    1d:f2:59:12:bc:fb:ff:20:57:b4:76:96:b9:53:99:
                    e7:66:ab:e0:d5:6a:05:87:ea:33:90:66:63:9f:82:
                    1b:b2:2b:cd:74:ea:6b:be:5b:92:08:c8:1f:01:13:
                    97:7a:79:7e:5d:fd:d0:01:4a:2b:0c:39:16:d9:0c:
                    f8:45:e0:7e:9d:7e:1d:cd:98:dd:33:bb:11:b2:d7:
                    c1:e7:47:00:2d:46:71:82:a3:f9:35:a0:41:6d:f3:
                    9f:bf:94:06:94:6b:c8:5d:78:9b:a7:97:27:5f:bc:
                    b7:71:84:ff:6e:c1:5c:32:2b:f5:39:04:7d:40:62:
                    e0:ba:d7:4f:96:01:ff:30:13:c7:81:63:71:f3:9a:
                    a8:69:ec:45:e9:4e:43:09:2c:ee:39:3d:f7:df:1b:
                    07:2d:98:57:0d:89:ce:77:e7:7b:2c:7e:f9:8b:12:
                    57:f5:4a:b3:d3:0b:37:c2:86:ab:b0:c9:00:2e:bf:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:05:D5:AA:0C:28:AA:D5:37:D1:12:68:4F:58:DF:E5:D1:D7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.8.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:a7:e8:cc:c8:d9:aa:f8:20:e4:23:4d:1e:0d:7d:66:6d:
         02:d8:46:f3:54:c4:62:0b:3f:3e:ec:2b:5b:11:46:75:35:e1:
         de:bd:f8:d6:c1:ea:26:f3:c9:6d:7a:78:8c:89:85:54:db:d1:
         5d:e8:42:fd:52:94:bf:71:4f:3f:ba:67:ae:c5:b7:24:c7:03:
         f2:c7:70:da:a2:af:3e:2e:ed:c1:42:46:53:31:3d:bf:88:cf:
         ee:7d:4e:56:17:fe:80:9e:da:19:f1:70:0a:db:26:83:a7:c5:
         39:44:0a:ca:d3:5e:a3:5e:0e:03:44:66:03:11:45:bb:ed:3d:
         fb:15:98:28:1a:46:45:5a:c1:e8:6b:b7:ca:28:a1:30:55:b7:
         49:a6:f8:25:61:58:5a:fe:c5:e7:e2:b3:ed:d2:a6:4c:35:63:
         b2:f6:f4:3e:78:4d:c4:b9:bf:99:f6:75:02:e8:42:9f:c6:df:
         a9:17:9f:42:8a:f4:72:6e:bb:8a:98:98:14:63:74:65:45:b4:
         0a:6b:d9:a4:ff:2f:e0:5e:96:3e:b5:b5:3f:dc:a7:bd:b0:74:
         9f:cb:94:dd:9f:04:09:b7:56:7a:08:0b:9f:2e:73:76:c8:85:
         b7:42:82:72:ca:8d:7a:4b:9a:be:8c:f4:1c:ec:a1:88:1b:19:
         00:51:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:26 2025 by rpki-client