Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
File:                     df5385bc-7c9f-361d-8431-48648c5562f2.roa (raw, json)
Hash identifier:          a27495UdipZnKykFM5HquXVLpZr4WrtVzVXM1sU95+c=
Subject key identifier:   BE:91:73:11:35:94:2F:DE:50:81:DB:69:DF:5E:52:5F:46:06:94:DC
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584AC87632E187B68971BF10B300
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     6643
IP address blocks:        173.199.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:32:e1:87:b6:89:71:bf:10:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=abee9cd9-89d2-4874-98c2-9a830312c7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:e0:b6:08:51:cb:5f:59:81:7d:65:11:94:
                    e6:1f:41:ab:2d:96:40:63:69:0d:b5:f7:31:67:bd:
                    3f:9b:5e:74:b9:7f:d3:3c:13:8e:82:6c:93:9e:6d:
                    42:34:21:8f:2b:0d:2b:25:4b:2d:1f:3e:23:6c:2f:
                    a1:7c:c0:9b:d7:5b:ff:75:50:3d:81:49:44:35:fd:
                    9e:e0:9f:6c:30:be:69:92:d0:8a:a7:7b:a7:66:2b:
                    b8:d3:1d:d3:8f:89:b6:6a:08:d3:cb:8b:c3:43:2c:
                    94:b0:f3:a1:06:5e:29:66:48:d2:e1:47:07:e4:1d:
                    24:55:48:90:f4:32:25:5e:38:fa:b1:5c:33:76:2d:
                    de:d4:0b:8e:f3:da:72:34:c6:d5:a5:ac:4e:cc:91:
                    cf:18:2a:b1:62:8e:4b:62:6f:c2:2f:4c:20:df:d9:
                    94:18:69:9b:04:70:54:00:4c:db:68:f0:65:6b:66:
                    ea:43:40:d4:46:50:be:b2:88:e4:9e:72:34:34:2a:
                    bf:9b:1c:9e:09:00:6e:70:7b:bf:fa:21:70:76:96:
                    02:ac:61:f6:b4:66:cb:49:76:ed:c9:26:3b:bd:71:
                    59:52:53:bd:7d:a2:0c:3d:11:6c:1a:1e:ef:50:6a:
                    f9:92:e7:25:8f:da:76:92:a1:4e:28:35:c5:5e:91:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:73:11:35:94:2F:DE:50:81:DB:69:DF:5E:52:5F:46:06:94:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:9a:f5:bb:6c:be:03:db:f8:ce:0f:0f:f1:a1:a3:cf:6a:
         3c:ef:5a:2a:5a:f2:17:3a:46:e9:12:41:db:2d:c5:af:b6:fc:
         eb:0d:25:58:2d:aa:fd:33:e8:72:f4:37:e7:c6:a0:81:35:e5:
         63:d5:d5:a0:30:a0:4b:59:3c:8b:0b:fd:ee:dc:14:22:4e:fd:
         ca:6f:84:e9:29:23:d6:fa:01:bb:fb:c4:37:7b:70:93:f4:cd:
         4a:75:ff:45:35:49:68:1e:54:18:4f:c7:f7:e6:be:14:e1:eb:
         8e:38:8a:65:c2:ce:b0:95:e9:42:88:15:d2:26:eb:d8:3e:a0:
         e8:50:74:f9:5b:a1:3e:ad:04:fa:1b:34:5f:48:3d:44:cd:c1:
         72:05:8f:fd:df:77:b3:01:dc:09:3a:be:03:79:be:7c:f0:8d:
         fe:5b:9d:4c:87:9b:b0:28:fc:1a:1f:1a:c1:de:37:39:46:c9:
         d4:a3:a4:03:ce:5c:ae:3e:8e:64:6b:57:45:69:57:26:fd:01:
         de:d2:01:1a:1f:e7:93:0d:8b:66:f3:46:bb:1c:6a:10:4c:74:
         b8:88:eb:f9:1f:3c:26:9e:2b:64:16:69:bc:05:e7:7a:f6:0a:
         38:1d:40:37:23:11:60:50:fc:7c:cb:5e:26:90:eb:15:26:e5:
         96:77:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:54 2025 by rpki-client