Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa
File:                     9c0ab96e-07f3-340f-b026-49a7e297e98f.roa (raw, json)
Hash identifier:          2wg7ZYnFtbIubuVhAvVoTzxlsOen8lak+PXEda6RX84=
Subject key identifier:   6B:95:46:DB:B1:7D:DA:F9:83:02:B4:8F:24:86:EA:C5:40:6C:40:BC
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584AAB264F916A1A0F846F3A0B80
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     33309
IP address blocks:        199.189.204.0/22 maxlen: 22
                          199.189.204.0/24 maxlen: 24
                          199.189.205.0/24 maxlen: 24
                          199.189.206.0/24 maxlen: 24
                          199.189.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:91:6a:1a:0f:84:6f:3a:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=881a40d3-78a2-4616-9873-63440ca78258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0d:63:a1:52:cd:e3:96:2e:6a:cd:92:ca:c1:
                    d6:a6:9f:ac:9b:8a:b7:8f:40:3f:a3:92:b6:0e:1a:
                    95:d1:60:c1:80:9c:1b:b0:6d:2f:af:3d:6b:2e:b1:
                    2a:9e:c6:e1:18:47:1f:df:45:0b:ef:dd:94:62:b7:
                    27:e1:8a:b3:95:7d:d4:1c:1b:66:c1:1a:09:e6:aa:
                    49:bc:7e:db:0e:de:f1:17:52:aa:ac:a5:05:f4:29:
                    a3:4b:90:23:8d:a3:2d:38:9b:65:ed:a8:84:e4:c4:
                    07:af:7d:96:c4:46:cc:8c:7c:ac:e0:81:56:61:f0:
                    8f:ee:55:1c:3d:51:be:7a:0a:a5:c1:f4:fe:cc:24:
                    52:de:4b:66:b4:4b:14:19:1f:83:5e:cd:18:09:84:
                    63:5c:61:ab:30:68:26:c3:d1:70:67:2c:9e:31:54:
                    8e:05:d0:f6:83:f3:bd:9e:bc:b4:2a:ca:5f:59:80:
                    e7:30:a3:94:d1:8a:77:63:dc:00:43:10:c6:85:9f:
                    13:e1:96:f9:c1:b4:1f:9b:d5:02:b9:66:fe:05:b3:
                    73:38:16:ef:37:3a:4c:63:01:48:66:97:fb:44:47:
                    2b:4c:4f:f8:1d:3e:0e:78:a7:33:8c:f6:93:5d:07:
                    49:55:87:83:4e:45:d4:e7:eb:fe:5b:12:b2:78:d7:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:46:DB:B1:7D:DA:F9:83:02:B4:8F:24:86:EA:C5:40:6C:40:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:c6:cb:09:71:bc:a7:77:14:90:5d:01:d8:78:8c:e3:6e:
         54:7f:0a:95:19:ba:ef:38:0c:f1:4c:ab:a7:8c:08:9f:90:63:
         ce:51:d4:0f:79:e8:d6:a0:7f:af:2b:02:f7:f7:45:bb:c6:17:
         fc:a8:2f:07:7b:24:b4:c8:3f:05:5d:e2:0d:09:7b:3d:9a:aa:
         fe:51:4d:54:fb:60:74:57:3d:58:2f:a2:27:16:5d:43:c9:8c:
         98:0e:73:3b:cd:bd:fe:ee:ab:62:39:5b:52:9f:d1:58:5c:a3:
         83:b3:fa:6e:0a:2d:58:82:88:ad:8d:4d:91:7d:f3:10:2b:6e:
         68:b2:a5:4c:81:67:ad:81:ec:55:28:75:71:16:f9:bc:cf:d3:
         5e:51:3a:36:ba:01:d9:42:63:d8:c0:5f:44:0f:75:f9:e2:a5:
         94:d3:32:3d:a0:fa:5e:e5:3a:df:5d:f9:d0:10:66:79:15:b2:
         1f:d8:78:80:bf:31:66:15:a4:34:36:63:ea:1f:f2:79:85:2c:
         40:61:2b:54:2a:55:86:33:fc:26:41:b6:9a:38:a1:42:b3:cf:
         2e:7e:a9:58:ad:64:e2:bd:1a:4c:62:37:6f:62:03:89:5f:d1:
         e9:32:f5:59:2b:9b:b0:be:60:9e:0f:6e:d3:62:2e:54:b1:01:
         d7:fa:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:44 2025 by rpki-client