Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
File:                     23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json)
Hash identifier:          SqsqB1wvvVHD82oUilbOg4k6UwTZBS5BTFb/1UAAc9A=
Subject key identifier:   73:EA:B6:0E:7F:31:24:84:20:4B:AC:15:15:94:3A:83:EA:35:63:42
Certificate issuer:       /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Certificate serial:       010D0C9F4328584A2ABADD845D428DE32CBD0280
Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        209.46.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:dd:84:5d:42:8d:e3:2c:bd:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=f18b5896-2043-4d9d-97b4-08dd71a5ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:da:db:93:8a:8a:92:49:08:8b:9b:70:bb:
                    46:dd:55:08:7d:a7:84:df:20:22:cf:e4:6a:c2:85:
                    ae:ff:27:9b:dc:18:8e:10:9a:a1:a6:f6:9c:7e:1c:
                    d9:5c:47:5a:73:63:c0:dc:fd:86:35:b3:f7:42:72:
                    05:22:34:07:59:b5:74:a0:b5:4d:2a:bf:1f:fe:65:
                    23:e7:e9:ce:58:f3:f1:ad:7a:8b:5c:99:3e:68:75:
                    96:b0:be:fa:a0:91:8e:f8:4c:00:fb:81:42:96:48:
                    39:fb:2b:af:96:08:fd:a8:83:57:00:d5:e8:7c:36:
                    59:c1:d7:5d:b8:82:95:de:f0:13:8c:f8:13:fa:e5:
                    7e:9b:f6:f8:b0:69:15:75:16:4d:67:d4:14:98:4c:
                    3c:53:b4:de:30:07:f8:51:cb:bc:d3:82:13:b4:7c:
                    39:c7:d3:0b:31:56:f2:cc:5b:84:05:b0:90:f2:19:
                    3d:e2:b4:11:79:86:aa:a2:b1:2c:e3:0c:59:3f:6a:
                    be:72:1e:80:e7:ce:ce:21:70:33:f2:09:86:9b:a5:
                    2f:aa:57:d3:ad:85:3a:a9:ba:c3:eb:68:20:b8:2c:
                    94:97:1b:c4:fd:06:c5:90:70:38:9e:bf:bc:fb:44:
                    e8:58:98:bf:55:49:27:a3:f5:2d:f7:b2:ef:67:c1:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:B6:0E:7F:31:24:84:20:4B:AC:15:15:94:3A:83:EA:35:63:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl

            X509v3 Authority Key Identifier:
                keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:19:4e:04:a9:a2:73:4b:23:6b:5c:4b:da:69:dc:07:13:
         7e:ce:f0:7a:ce:1d:64:2e:ad:d9:67:cc:46:71:3d:96:e3:2f:
         67:98:fe:18:b2:5c:68:34:b7:fc:bc:26:0e:9b:0b:9f:ae:9e:
         28:2f:25:2f:af:4b:f7:1a:fb:c4:86:25:5b:97:68:2e:38:f8:
         90:fe:b2:fa:b4:c7:58:d4:87:d1:2b:72:16:76:ea:bd:ff:da:
         c0:4d:39:7f:c7:60:71:ab:c3:35:69:d8:c8:9f:57:42:08:93:
         f8:c3:16:fc:6a:29:7f:11:c7:66:98:cd:a1:18:f5:9f:c8:b9:
         59:9d:f4:69:7c:2b:cb:e0:f0:bb:b2:d2:96:c1:5f:f6:18:34:
         69:1c:ce:92:7e:48:22:ee:c0:38:72:7b:36:1f:00:ad:9b:0f:
         42:c0:d7:bc:c7:38:fd:4e:b3:93:4d:46:30:fe:29:cd:73:a1:
         8e:cc:8c:d8:28:03:a3:53:5d:f4:cc:52:69:99:a3:5a:72:73:
         87:52:3a:9b:92:c8:a2:b9:55:a8:52:2d:d9:91:2d:bd:4d:7a:
         89:9b:49:d7:5b:02:87:65:04:66:87:d2:ca:4f:04:14:e2:cb:
         38:a1:2c:17:5b:ff:c2:6c:d4:04:c8:d6:2a:f3:19:67:0c:cc:
         99:64:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:04 2025 by rpki-client