Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/612364ac-24a2-32f5-8b02-cc553fb685ac.roa
File:                     612364ac-24a2-32f5-8b02-cc553fb685ac.roa (raw, json)
Hash identifier:          j5f8fp89Eh1NbuNNo1R9g0NDfi6I+i6m9wMqNavv6jU=
Subject key identifier:   99:64:4D:EE:2A:05:1B:CB:EE:36:FF:BE:20:8B:E3:ED:A3:E1:B8:6F
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584AB4EB72EAF81C2486A4E1C680
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/612364ac-24a2-32f5-8b02-cc553fb685ac.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     14618
IP address blocks:        209.166.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:72:ea:f8:1c:24:86:a4:e1:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=879aff74-bd2b-4550-8675-bebb4e018e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:5e:a2:95:11:76:06:c7:f0:04:26:c3:e5:
                    26:5a:25:ea:e9:26:d7:a5:5f:de:0f:c5:24:49:64:
                    1c:db:3d:b0:91:3d:f5:67:33:92:6e:fb:b5:6c:fc:
                    d4:de:8a:e2:18:0f:cb:a4:dd:b9:ef:c3:fc:68:d1:
                    3c:46:3e:02:75:4c:93:a0:6b:7f:03:65:02:3d:15:
                    22:37:4e:34:bf:e0:99:4b:bd:38:3e:3a:93:1c:a1:
                    70:38:86:14:f7:2c:1f:22:65:ee:83:5f:c1:da:b4:
                    a0:39:66:5d:17:a8:ee:e6:ca:36:0c:3f:1a:97:39:
                    c2:00:d5:1a:5d:bf:27:9b:85:95:0a:78:6a:22:b7:
                    cc:2a:f2:2f:16:b9:de:18:e8:f6:47:a2:6c:6d:3c:
                    f0:1f:87:00:f7:f0:91:d8:a8:9d:17:b5:44:50:62:
                    94:0e:bc:df:49:33:d9:8d:1c:86:03:de:f4:6a:57:
                    3b:95:20:81:4f:d4:ee:b1:98:b7:a0:ff:33:4c:37:
                    1b:5d:3f:5f:41:a6:1f:b3:24:25:0a:f9:1e:a9:0e:
                    09:a9:5a:f8:eb:35:15:e8:9b:cf:44:c2:39:4d:17:
                    21:a2:8b:a4:d0:4d:35:97:5d:2c:c3:d8:25:01:6e:
                    30:6c:0c:46:31:c9:28:af:0e:8f:ec:cd:1c:4e:c7:
                    3c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:4D:EE:2A:05:1B:CB:EE:36:FF:BE:20:8B:E3:ED:A3:E1:B8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/612364ac-24a2-32f5-8b02-cc553fb685ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:5a:f5:6e:ef:ed:bd:3a:89:6a:13:41:03:9d:1b:63:d5:
         9f:98:ed:0c:08:b5:7d:8f:af:dd:c4:47:51:f0:77:6d:1e:c4:
         84:ac:c7:38:72:57:dd:6a:12:44:ac:71:9e:49:27:4c:a6:28:
         1f:fa:f9:22:f8:3c:fb:e2:6e:e1:8a:b4:da:60:c3:f5:83:5f:
         80:44:01:04:4f:6b:ed:56:5b:06:b0:96:37:bb:d3:fc:8c:1c:
         5a:ec:a3:f6:e3:2b:88:d2:62:d8:c4:62:7a:a6:f0:d0:55:63:
         31:43:b9:27:9e:66:13:b8:18:3f:97:10:5d:05:c0:91:26:c1:
         ce:42:ad:cc:b0:a1:00:f8:8a:fc:aa:0d:29:f7:e8:95:d9:1c:
         88:42:f1:8d:af:ee:40:b9:3e:59:a7:8c:1c:51:40:41:2b:13:
         b7:51:b0:9f:f7:a2:7a:43:54:70:71:a6:36:26:86:0c:86:5b:
         23:6a:b2:2c:83:df:c9:f6:ac:32:a1:fd:71:ab:4b:8f:9c:7c:
         44:75:9e:ef:02:df:1c:2d:6f:2e:5b:57:72:08:59:ad:d7:38:
         c1:fb:f8:ff:dd:4c:54:ab:36:49:f2:32:63:cb:cd:c7:b8:c8:
         a7:aa:52:a4:99:82:c3:5e:c6:d1:e9:2f:8d:42:65:44:a4:cf:
         76:cd:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:34 2025 by rpki-client