Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/6d12203f-ecf9-3f38-9a28-0b8a4cfb7d19.roa
File:                     6d12203f-ecf9-3f38-9a28-0b8a4cfb7d19.roa (raw, json)
Hash identifier:          IRINYQI3FamE/hQAYpgklRUyjlXIKlsTHASSt3WfdcE=
Subject key identifier:   AC:C1:46:60:0D:69:D9:D9:4A:7A:FE:D4:29:0E:90:B0:8D:9A:B0:F4
Certificate issuer:       /CN=54d4a1ca-3709-4693-b886-f80eff68da2a
Certificate serial:       010D0C9F43285849C4D4B8680B9AE12E538CC360
Authority key identifier: 79:EF:4C:E8:05:82:45:67:8A:F8:68:04:E1:BD:35:51:AA:4C:88:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/6d12203f-ecf9-3f38-9a28-0b8a4cfb7d19.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        208.82.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b8:68:0b:9a:e1:2e:53:8c:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d4a1ca-3709-4693-b886-f80eff68da2a
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=7fb24abd-0fb1-44f6-9e9a-b792c4289ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:93:e8:d8:26:81:ce:57:7a:0e:04:3c:03:
                    6e:fe:d4:c5:75:14:8d:69:3e:aa:88:15:af:5c:ff:
                    f0:7e:a2:ff:92:8a:79:10:d9:64:81:a9:4e:01:bf:
                    82:ee:37:43:a7:a0:bf:1d:33:10:c3:42:95:27:23:
                    4e:a3:44:6d:b0:f4:d9:7f:d1:6e:94:0c:21:21:d4:
                    a0:e8:77:9c:ff:de:56:ca:e9:81:53:a6:af:54:40:
                    7e:62:5a:77:a2:ec:09:a0:9a:8f:e2:11:47:d5:66:
                    b1:1d:bb:10:89:36:3e:ec:1e:ec:01:62:f9:5a:7b:
                    44:c3:79:69:a5:82:7c:6b:18:29:2e:05:de:28:18:
                    df:f3:06:97:d1:aa:e4:dd:fe:4a:b0:7a:2c:e3:96:
                    24:ce:2f:90:56:01:0c:5e:ea:8c:13:78:28:34:28:
                    d1:41:e7:95:fe:25:17:40:05:24:8d:85:a6:c1:23:
                    d1:fc:f2:32:48:a1:f8:19:a1:d6:4e:c6:ce:71:1d:
                    44:52:6f:a2:cd:a7:15:69:99:4c:f7:cf:67:b0:03:
                    93:4e:79:b5:d4:17:77:25:b8:be:e2:ed:02:89:6a:
                    05:7a:66:36:78:c2:39:83:79:53:48:72:ed:d6:ec:
                    a6:82:6b:6b:1f:6c:ce:ae:ea:a3:66:d6:36:ce:86:
                    68:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C1:46:60:0D:69:D9:D9:4A:7A:FE:D4:29:0E:90:B0:8D:9A:B0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/6d12203f-ecf9-3f38-9a28-0b8a4cfb7d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.crl

            X509v3 Authority Key Identifier:
                keyid:79:EF:4C:E8:05:82:45:67:8A:F8:68:04:E1:BD:35:51:AA:4C:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:23:95:c8:6d:ec:fe:65:39:f0:96:1f:9b:e7:60:10:fa:21:
         2d:38:ee:03:54:43:5c:55:e7:1e:82:04:a2:31:ed:a7:c5:54:
         cb:74:7b:28:da:f6:39:39:57:d7:c3:c9:49:67:ab:a1:71:59:
         ef:31:e3:58:03:2f:55:3d:12:ab:5f:ce:2d:d8:08:13:05:6b:
         57:72:c1:23:25:58:6c:c2:5c:4f:64:bd:17:f3:d0:6b:42:26:
         5f:45:3a:32:6f:d7:e4:0c:21:b6:8f:0e:1b:5a:9e:5f:a8:c2:
         e3:57:39:5d:a0:55:11:e9:85:4e:e4:f4:74:d4:76:6f:4f:2f:
         39:52:f4:85:36:48:d5:c7:f6:24:f5:eb:f3:67:41:0c:92:e8:
         9e:9f:07:fd:e2:c8:5f:67:af:61:74:f6:56:1b:ee:8d:6a:95:
         77:e3:da:41:eb:d6:5a:26:d6:59:91:06:3d:58:2d:d7:a3:44:
         51:9c:55:7a:2d:2e:5a:1d:01:ec:8e:df:fd:5b:72:b4:4d:b5:
         23:4c:be:11:52:de:b7:c4:da:f3:35:dd:49:0e:bc:97:a8:08:
         0c:f6:5d:b8:fa:b6:8b:a4:4f:d2:34:e7:cd:2c:67:20:e9:e8:
         51:1f:36:7a:ca:4a:66:4b:19:ea:47:b6:6e:0f:d7:ed:af:15:
         7e:fe:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:29 2025 by rpki-client