Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa
File:                     da7256ed-b8b3-3316-80e4-db695c434382.roa (raw, json)
Hash identifier:          lAHNw5IFX4ebPR5JORh2E4MGHdT+JJy+RPlh0/iirwk=
Subject key identifier:   00:B7:A7:FD:35:53:91:78:D5:BF:91:D8:C8:7D:CE:FD:B0:23:5F:86
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A7A5B08D64CA115FFA2484C80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa
Signing time:             Fri 11 Jul 2025 01:32:48 +0000
ROA not before:           Fri 11 Jul 2025 01:32:48 +0000
ROA not after:            Thu 09 Oct 2025 01:32:48 +0000
asID:                     16417
IP address blocks:        208.90.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:5b:08:d6:4c:a1:15:ff:a2:48:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul 11 01:32:48 2025 GMT
            Not After : Oct  9 01:32:48 2025 GMT
        Subject: CN=4a072ffb-001e-45d7-bafe-9b30f0310ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:e6:2f:9b:49:e9:b6:d2:6a:c4:e6:62:ca:
                    54:14:17:9c:51:92:e1:2e:b5:23:da:df:92:2c:fc:
                    90:c4:e1:3c:9a:b6:81:d6:28:7d:0d:a3:89:08:fa:
                    dd:0e:60:c1:46:35:44:88:69:cc:a8:90:be:c5:d7:
                    c6:3f:89:df:1b:9f:e0:9d:50:1c:64:04:bd:b0:92:
                    5b:c0:3f:4b:15:78:07:c4:48:2a:d1:1b:21:5b:47:
                    ff:75:37:e1:d7:4a:37:33:80:1d:6c:76:3e:dc:a4:
                    c4:b6:d9:16:65:6c:25:f9:58:9d:47:1d:49:5d:d0:
                    92:37:ea:67:0d:ed:23:47:d3:fa:74:f2:aa:7a:ef:
                    3a:ca:6c:96:b4:25:68:af:5c:ce:ca:41:56:54:b2:
                    df:1f:06:83:31:0a:8a:16:dd:3e:4a:84:08:b4:f4:
                    1d:29:3b:20:1d:ac:17:c0:39:2f:f9:c1:d9:4f:3b:
                    72:cb:83:07:ee:b0:0e:fb:1a:44:ae:af:b1:71:1a:
                    7b:c3:e7:27:8e:6d:95:73:75:72:c7:f8:38:4a:7d:
                    bb:69:03:f9:d7:7b:4a:f9:4a:4d:8b:a0:69:3d:ba:
                    17:fb:e6:15:ff:f5:d6:7c:f7:a9:8e:de:a5:25:fb:
                    d2:99:81:34:6d:21:85:dc:f4:b2:81:8d:a3:ce:05:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:A7:FD:35:53:91:78:D5:BF:91:D8:C8:7D:CE:FD:B0:23:5F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:9c:be:27:e7:cf:bc:0e:de:c9:89:fa:f9:07:d8:fc:db:
         e1:d1:19:9d:c0:7c:ae:a0:8e:49:52:86:0f:b8:d8:7a:43:d7:
         49:49:51:c8:df:4e:dc:19:e8:b4:50:3b:1d:8f:22:1b:42:b1:
         d9:9f:14:5f:ea:99:55:4c:60:72:8b:0c:1d:37:52:53:95:80:
         09:8c:15:ba:17:24:5f:8b:c5:c2:cd:12:df:b9:01:4d:04:c9:
         6b:cf:72:e5:e6:00:d0:5a:1c:ce:f4:d9:dc:8f:68:34:42:d2:
         28:a3:34:4a:d9:7d:54:73:51:09:6c:b7:1d:b0:f9:8c:63:cc:
         64:ae:b2:df:ee:2b:32:99:7c:7b:8e:23:30:0e:ce:b4:74:ca:
         81:29:4f:f1:16:a6:61:84:0d:7b:ff:d6:f7:33:20:03:e7:af:
         28:2e:af:95:c2:cf:b0:08:c3:e2:ed:e2:92:80:52:44:cc:2d:
         bf:44:ed:fe:d9:08:18:6b:9d:0c:9f:59:37:ed:73:cb:b4:83:
         04:02:ba:7a:a7:81:61:80:c4:17:6d:3e:f9:69:1a:92:b2:ca:
         70:e4:26:89:67:83:14:d6:6e:07:f3:b5:9d:e9:6b:9b:9c:a4:
         96:eb:de:54:2a:0a:76:f1:d8:57:b2:64:5f:3c:13:4e:41:26:
         37:f7:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:26 2025 by rpki-client