Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa
File:                     79befa65-2932-354e-aa3c-9d8fa2f95a14.roa (raw, json)
Hash identifier:          ym02d54q/A2vBtvRIl7Igo3H7sh5SJCFedySDtCt2SM=
Subject key identifier:   B8:97:25:69:32:8A:1D:7C:25:53:4A:77:1E:51:02:3D:53:84:49:C9
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F43285849FE0FFA92F27B8D806EE3CA00
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     8014
IP address blocks:        108.60.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fa:92:f2:7b:8d:80:6e:e3:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=e13470e8-3e13-4378-a9d8-35368feb2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:eb:d2:3b:f6:b4:48:07:45:58:e2:46:80:
                    18:5a:2c:8c:15:2a:03:95:ac:37:1b:d4:20:d1:9a:
                    91:52:8a:05:cb:c5:3f:21:e2:ae:b2:bd:14:aa:a2:
                    9e:5d:b2:a5:4b:0a:7c:6d:3d:7b:4f:d7:c4:3b:49:
                    9e:04:71:dd:53:aa:fc:24:2b:ed:0a:c7:e7:49:02:
                    d5:43:ec:00:46:16:bc:4f:a4:62:32:1e:64:42:80:
                    8c:95:8d:7e:9f:26:bb:40:e9:eb:88:5c:a2:65:dd:
                    ea:bc:dc:8e:86:6c:6c:f6:4f:b4:6c:66:6d:c8:dc:
                    5c:86:7f:dc:2c:b8:57:c3:b1:a3:1a:9b:ef:09:0a:
                    e6:e0:61:ef:55:7b:0b:71:6d:79:67:4f:6f:cb:0e:
                    55:a6:d1:14:fe:ac:32:5d:e2:63:b0:ce:d7:eb:c6:
                    6c:05:b4:9d:a3:72:97:d1:e9:b1:33:a1:76:24:4f:
                    2a:72:84:a6:c5:c0:f9:40:3e:dc:b6:cf:fd:97:82:
                    8f:b7:92:83:16:f6:e8:4b:7f:9e:eb:de:02:4f:4e:
                    12:1e:ae:83:77:2b:a8:5e:9c:8a:b5:bb:55:a2:75:
                    1c:07:98:bc:1f:6a:b5:c5:f2:63:41:ba:f0:99:55:
                    3d:81:d2:96:f9:a6:62:76:51:4e:96:fb:21:1f:a9:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:25:69:32:8A:1D:7C:25:53:4A:77:1E:51:02:3D:53:84:49:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.60.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:15:9e:29:21:90:a8:63:b8:04:f4:7c:bf:14:50:bd:83:4a:
         06:a2:e4:8a:bb:a5:a8:ff:27:73:66:e5:73:31:12:8e:e9:56:
         fb:46:28:e3:c4:02:6d:27:7e:59:9c:3f:d3:56:76:b3:84:9f:
         5d:b2:9c:ac:5b:5a:fb:44:06:b7:ba:3f:3e:0a:d8:7a:f8:36:
         0e:23:fb:3a:68:28:09:32:e4:25:79:06:ca:a3:8d:8a:7b:2b:
         f7:fe:b3:be:c7:d3:bd:4e:eb:89:73:28:86:b8:90:61:75:6b:
         74:f9:03:fd:3e:4b:51:f2:75:99:41:ba:42:36:2e:24:72:f3:
         74:4d:18:1c:9a:df:b3:93:fc:b4:15:60:66:34:59:81:0b:b2:
         c1:49:03:26:aa:81:a8:d5:41:6d:4f:2b:96:2b:16:0f:e3:7e:
         95:5d:5e:62:10:cc:fe:4d:27:20:9b:7f:77:8d:6e:61:36:91:
         8e:ea:f0:ed:e1:b0:81:6c:ab:80:6b:27:a8:5c:fd:05:cd:a3:
         7a:10:01:08:cb:0e:b6:a9:94:ba:cb:b0:98:a2:6b:4f:8c:10:
         31:a0:7e:84:18:88:1b:67:89:3c:b0:43:92:0f:c3:f5:4a:8b:
         e8:61:d1:de:b8:cc:09:2c:c0:c8:7b:d5:6d:16:b9:b6:b3:53:
         c5:be:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:12 2025 by rpki-client