Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa
File:                     c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa (raw, json)
Hash identifier:          coSD7Dg6vlZr5oYS8SR862uau2E4U2zFuROfybRxaks=
Subject key identifier:   80:3A:0A:96:DB:DC:A6:A8:B9:F2:CD:11:D2:4E:D4:74:F5:81:13:85
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A03A54DE9848BD853B3B71FC0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     13576
IP address blocks:        208.53.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4d:e9:84:8b:d8:53:b3:b7:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=1ce0fdec-6f93-4baa-b069-365e8ef19623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:11:e2:96:1f:3e:4f:cd:89:0b:be:ab:90:fd:
                    af:39:1d:22:55:3b:55:b8:f0:cc:94:1f:b1:62:6e:
                    b5:d0:2f:f7:77:61:06:0f:f5:7c:77:ec:4e:ee:cb:
                    24:b7:51:f1:36:5f:83:01:f7:be:78:f3:b9:b7:5b:
                    ee:69:bc:50:31:f0:93:1f:4c:4c:ea:43:ee:c8:e0:
                    8a:df:c6:ad:7f:ad:3e:e9:4a:54:cc:b8:a0:4f:e7:
                    21:bf:08:5f:7e:7e:38:f4:30:2f:14:39:2f:33:b5:
                    30:33:7e:73:c3:a9:2f:41:f3:23:90:aa:7a:65:53:
                    34:9f:7c:51:b3:e4:94:80:53:2b:02:12:64:32:d4:
                    70:56:ca:13:19:09:17:fd:e1:ca:98:cb:29:85:64:
                    77:f5:7d:2a:0b:95:51:45:c2:82:cf:0f:58:3a:5d:
                    20:4c:37:94:ef:ef:48:05:9b:14:bc:52:c4:64:99:
                    d6:1c:50:29:e4:19:fc:cb:78:2d:be:dc:9c:78:84:
                    c3:91:31:4f:23:23:ee:a2:b3:f1:db:cf:e1:c6:db:
                    98:a0:eb:d7:c8:25:5a:c2:1a:2e:83:12:e2:3f:af:
                    ac:5e:59:e4:c6:cf:90:e0:c4:95:d4:4f:23:89:36:
                    e4:55:f0:0a:0e:c7:d9:96:3d:16:aa:2c:36:af:95:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3A:0A:96:DB:DC:A6:A8:B9:F2:CD:11:D2:4E:D4:74:F5:81:13:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:81:2f:b9:4d:14:2e:9c:0c:ac:59:d7:c8:4a:c4:d1:c2:0b:
         05:d5:a6:48:e3:27:6d:45:f3:9a:d2:6d:d0:19:8a:b8:68:83:
         c9:b8:f5:81:95:c2:3d:2d:38:1a:bd:14:9f:7a:20:97:9d:97:
         ee:e5:e1:1e:f4:b8:95:92:68:09:18:29:ae:15:5f:09:33:2e:
         e5:a0:a0:b6:69:85:e2:38:91:86:ba:8f:54:49:4e:2c:b1:76:
         9a:91:49:d4:86:f3:21:37:b6:42:ed:97:cb:21:7b:bd:4a:c1:
         71:de:96:dc:47:b7:d9:42:f0:a6:dd:c3:d4:d6:8d:51:e5:41:
         72:0a:0b:36:6c:04:3a:f6:06:58:9e:78:18:f4:3f:d3:2b:8e:
         cd:1e:e4:d5:de:ea:23:de:9a:0c:11:b1:96:0d:4e:fd:21:9a:
         4b:86:16:2f:5d:90:32:dc:d1:c4:fd:a0:62:42:e5:7a:ce:fd:
         95:09:76:39:9a:d8:ff:8e:8b:6f:00:ca:86:08:a2:b2:ea:fe:
         d0:30:94:e4:9b:ad:78:f2:a4:b0:23:a6:df:2a:13:ec:5d:22:
         d0:a9:1d:77:26:9b:62:e3:0c:6f:f1:01:5b:f5:2f:37:e7:49:
         7e:c1:eb:7b:2c:7c:7f:77:b0:ea:06:58:28:ba:10:e6:12:df:
         94:99:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:28 2025 by rpki-client