Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
File:                     b22abd72-0314-3d31-bb53-c6c482f407aa.roa (raw, json)
Hash identifier:          RcPI9JANT/hXO3hoIHNfWbuUw/1YaMpAegxbThQ8BpA=
Subject key identifier:   FC:BE:B3:03:EB:F1:50:F6:93:46:6E:75:76:AE:03:3A:68:13:DA:30
Certificate issuer:       /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial:       010D0C9F43285849C4D4B8A5DA51636D8D14E9C0
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        208.79.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b8:a5:da:51:63:6d:8d:14:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=c75fa408-e0af-4e7e-a644-a997eb79fabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:64:5e:00:de:1d:f3:ac:29:fc:98:14:84:
                    a1:27:e5:4b:74:33:1b:2a:f2:e9:12:75:aa:58:1a:
                    5b:54:4a:00:72:0d:b4:85:e7:ea:4b:88:36:0c:f0:
                    2f:d6:c8:55:98:ca:21:49:1d:fd:45:ed:e7:1e:be:
                    d5:77:82:60:aa:f1:f7:28:80:ae:c8:28:7f:1a:46:
                    d6:8c:e1:6a:69:27:b0:3c:1d:83:4a:49:25:5d:b9:
                    21:8e:df:40:54:9b:63:66:8a:2d:92:4c:30:c6:70:
                    ce:51:1f:8d:3b:a0:75:6d:1a:70:87:c7:53:a2:a7:
                    08:e1:45:cf:3a:75:f4:d8:53:7c:1a:d0:92:fb:48:
                    f7:0c:d4:4a:a2:bd:f2:f9:4e:ed:c9:24:4b:38:dc:
                    0e:16:14:4a:a8:a6:b2:3c:73:a0:ac:1a:31:51:ab:
                    5f:50:cd:07:8a:97:1c:c6:d6:63:bf:ab:fb:f3:d0:
                    74:37:96:cb:eb:e0:40:25:95:2d:1f:84:4a:30:cf:
                    a1:39:0a:6d:73:ed:7c:51:63:70:b6:f6:f7:45:e6:
                    58:54:d3:dc:72:7e:a4:cb:43:d5:ab:24:a7:cf:0b:
                    3f:ed:af:ac:43:81:8b:5a:f8:4f:8b:88:c2:d6:e3:
                    2f:de:12:75:f8:40:2d:36:81:8e:67:a9:2d:cb:44:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:B3:03:EB:F1:50:F6:93:46:6E:75:76:AE:03:3A:68:13:DA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:74:f5:40:62:74:03:1a:4b:dd:76:f6:8b:32:06:f0:39:d5:
         aa:15:8f:57:75:05:dc:b6:aa:16:34:a1:bf:6b:87:64:f5:95:
         fd:7b:ee:6b:8b:7a:bd:7a:a4:f9:93:83:d7:3a:06:11:94:ca:
         66:b1:b0:7d:2c:cb:43:8f:bb:30:bd:54:fd:49:e6:b4:72:ae:
         6e:fb:32:d6:05:d4:d1:8a:b8:82:43:72:d9:d5:ae:d1:4c:af:
         19:4d:0e:3f:b8:00:0d:cd:00:e0:8d:f8:94:4d:6d:3d:60:6b:
         3b:94:25:94:0d:28:d0:c3:e9:e7:75:8d:75:b5:99:a2:41:53:
         1e:9c:02:32:22:57:0d:96:4d:a2:d7:9b:d3:8a:28:a9:e8:53:
         01:43:6c:ff:b4:5b:d5:24:69:a3:ad:73:b9:a3:2c:8b:9a:23:
         4c:bb:dd:ef:d1:97:b7:4c:5b:c2:a6:d5:d1:f6:51:08:84:44:
         9c:2a:6b:e1:7e:b0:3f:2c:fc:7a:1b:89:5d:aa:ed:e6:46:46:
         a5:10:65:ef:bb:32:99:44:3a:ca:75:cc:8c:f5:16:ff:35:63:
         39:d2:57:53:7c:b0:a2:db:20:ac:51:dc:f4:b0:ff:4f:78:f6:
         c5:49:2e:31:81:7c:c2:b5:64:fd:6d:fd:cc:bb:df:1f:9d:1e:
         a5:38:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:20 2025 by rpki-client