Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
File:                     fc0068d0-a6ed-3e6d-8858-d68416365766.roa (raw, json)
Hash identifier:          fIkBWWodKHH3wp3hbtowA0XvvIKPXKvOoZXHcpsIcHg=
Subject key identifier:   72:B8:F8:3C:DF:1A:59:09:84:EE:30:A1:3A:81:40:0D:E2:E0:F3:FF
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584A43DAFF4669C699D0FD1D78A8
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:ff:46:69:c6:99:d0:fd:1d:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=aeaf9064-52cf-4799-98e2-cc57d2426d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:91:a2:51:1c:87:95:6f:1e:7d:d8:ea:23:
                    f2:a7:ab:3e:ec:f1:21:49:72:7d:e5:8d:21:8b:dc:
                    88:16:d4:b4:4e:c8:0f:a7:e9:ed:36:1a:a7:22:61:
                    76:06:b6:ce:68:1e:39:cb:61:3f:da:a1:89:80:68:
                    e6:99:11:10:0c:28:8e:e5:a2:ae:84:58:6d:43:df:
                    02:2d:35:6d:a3:c7:8f:b3:06:e4:37:bb:00:f1:7a:
                    fc:eb:c3:1e:40:8f:ba:36:8b:e9:6b:fd:e5:00:be:
                    c6:6a:aa:5e:76:aa:42:e1:20:40:ae:db:5c:97:e6:
                    ca:5e:cd:d4:38:2f:2a:11:f6:5f:db:47:03:42:aa:
                    b6:7f:77:2b:c9:76:a3:40:b4:42:9d:77:81:b1:ec:
                    6b:9e:08:b2:40:1d:3e:c4:51:6a:c0:1e:01:eb:17:
                    81:59:bb:1b:44:f8:50:76:dd:7e:40:c1:0a:b9:a6:
                    22:41:b4:78:1a:5f:f4:ee:42:ae:3d:aa:30:2b:ef:
                    fa:91:cd:44:bd:c4:55:ee:52:3d:1b:c0:aa:9e:c8:
                    9a:4e:d9:05:de:10:1a:f5:67:d6:a5:d4:55:e5:66:
                    7e:a3:bc:af:fc:fa:44:33:f5:67:0b:06:8d:92:66:
                    e8:08:4e:ba:8c:b6:07:54:93:b7:f7:90:af:4a:c9:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:F8:3C:DF:1A:59:09:84:EE:30:A1:3A:81:40:0D:E2:E0:F3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:52:7b:ae:c4:e4:95:62:b7:d7:c8:17:36:b7:58:06:6e:
         76:97:53:bb:ce:c5:c0:10:86:2d:07:a8:67:5e:3e:a4:78:e0:
         ac:eb:09:65:a3:bb:03:9d:82:16:07:a6:ba:5a:54:7a:5f:ad:
         1a:68:22:e4:72:54:82:88:a0:8b:b7:70:c7:b0:07:a0:fa:fe:
         0b:3c:e2:0d:ce:a0:0d:d9:40:20:22:4b:de:58:ba:92:9e:9b:
         4c:b3:5d:17:1f:be:74:c9:52:f3:6c:59:44:7d:a1:06:43:00:
         34:e2:b8:a0:65:66:3b:ac:85:c8:35:9e:bd:91:de:30:aa:73:
         76:a1:3b:9f:c0:37:64:d6:b8:da:43:fd:57:3e:e0:30:c9:ee:
         c5:a8:5a:a9:bd:67:b4:82:10:f6:70:4f:92:a6:14:54:0c:49:
         77:00:7b:54:82:55:da:66:f4:5c:f4:f2:9f:a3:1b:47:a9:5f:
         a3:b9:37:53:86:83:1e:6c:9f:5f:0a:8e:12:e1:4a:7d:0f:b1:
         31:07:7c:28:b0:b6:25:70:44:11:d3:1f:7a:fe:0e:4a:ef:1b:
         b8:ff:e3:54:d4:33:1d:50:02:04:01:b5:04:0a:72:95:d5:9a:
         4d:59:bf:19:bf:e6:85:2e:12:d2:92:9c:4d:b0:6e:28:c0:1b:
         3a:96:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:18:22 2025 by rpki-client