Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa
File:                     779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa (raw, json)
Hash identifier:          nMU/i1UxNF/IC0kCFN3sgNQBapZu8gk8pHIOdotDa+g=
Subject key identifier:   91:37:9B:B0:7D:B5:01:51:7F:9F:D2:E3:EB:92:34:C5:90:E4:B9:76
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F43285849D594EDB965CD35D060B0EA00
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     18474
IP address blocks:        209.173.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ed:b9:65:cd:35:d0:60:b0:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=22bae4df-e9e3-487a-8571-fb5276db5228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:84:43:4f:9a:af:48:8b:aa:2a:0e:91:cb:
                    41:bc:5c:80:97:10:59:a2:e7:4b:3f:3e:3d:d2:b9:
                    2b:59:14:26:cb:0f:59:48:80:13:23:5b:9e:f2:3b:
                    20:30:59:0c:9f:4b:01:8e:ad:ec:44:7e:22:83:24:
                    84:59:7b:b5:b9:f5:fd:38:61:23:27:8b:69:bd:3f:
                    19:8d:27:e6:78:91:fc:01:86:d0:72:e5:7e:83:46:
                    e6:ec:52:d9:b2:42:49:b9:0b:12:a4:e8:4c:5c:a6:
                    5f:c0:ae:bb:f8:f0:77:5a:cd:15:68:41:c9:e9:15:
                    2f:90:ec:99:2b:2f:31:bb:16:27:ff:95:c4:ef:6c:
                    7e:03:b0:18:a3:52:fa:71:90:ec:21:e7:21:0c:46:
                    a2:79:58:8e:22:93:38:fa:2a:4f:5f:f1:c0:60:33:
                    b1:fb:88:68:dd:7e:17:98:7c:a1:f5:50:02:e1:ac:
                    ea:9c:4f:45:b6:86:f9:97:38:39:d2:21:82:c9:4a:
                    b1:3b:9d:24:c6:6f:0a:be:e1:d3:e4:8f:f1:78:5f:
                    87:09:49:80:4a:ac:63:aa:c9:ee:65:b9:e4:1e:05:
                    6c:62:ac:ef:0e:3b:d7:6c:7c:cd:95:c6:36:bb:30:
                    4d:db:03:44:b9:51:9d:d1:37:07:4b:39:ac:d3:d7:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:9B:B0:7D:B5:01:51:7F:9F:D2:E3:EB:92:34:C5:90:E4:B9:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:87:04:1a:47:8b:0b:98:74:44:f1:48:5d:a1:a5:b6:f6:
         f9:47:78:94:e7:5b:f9:a8:60:3f:c0:02:5f:cb:35:75:19:51:
         96:b8:de:17:30:5f:5b:b4:0b:47:1f:ae:0e:c6:48:a2:4c:50:
         5a:e9:13:f5:c5:fc:d6:f1:36:a1:4f:e7:86:ad:f9:49:b9:1f:
         11:29:b3:7f:8a:a8:cc:98:87:97:03:58:85:59:4d:9d:df:af:
         ac:48:93:c6:67:0d:ea:48:26:3d:19:c3:b9:29:11:d8:86:54:
         4e:ec:62:ac:1b:e7:0e:f9:8a:70:d3:b7:c2:9e:61:6c:17:9d:
         25:7b:43:c0:f0:01:d3:61:65:15:11:c7:73:0f:2f:10:c0:b6:
         cf:e3:8f:5d:dd:f2:95:17:f9:a5:e9:aa:f8:6b:f6:fe:91:fa:
         48:d8:35:81:ad:1e:92:cd:c1:e1:e1:a4:62:66:cb:f0:9f:86:
         6c:8c:db:59:b9:0c:d4:42:24:d4:6e:ca:95:06:2a:e8:d0:a6:
         92:76:22:eb:af:bb:b6:4a:1f:74:0b:86:38:f0:1c:eb:f1:ef:
         ad:06:2b:85:c7:76:f2:e0:cd:15:76:43:ec:3b:db:61:df:a0:
         bc:a6:e2:2a:75:aa:7a:05:56:c2:4b:6f:9d:5d:83:3c:3c:68:
         fc:81:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:02 2025 by rpki-client