Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa
File:                     14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa (raw, json)
Hash identifier:          PkKaIEqf6BFNX29Bnq1atiBKGmhspgvEjqobHXhRXwI=
Subject key identifier:   7E:53:C8:15:0F:5F:94:CD:9F:98:82:E0:86:B6:D9:B8:7B:C7:4E:6F
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584A43DAFA0F3FE21326DA883B80
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     63267
IP address blocks:        104.171.208.0/20 maxlen: 20
                          2602:fd43::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fa:0f:3f:e2:13:26:da:88:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=5f758434-2a9c-4079-af5e-56533535e5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:f1:42:69:b4:dd:02:10:3f:bf:5f:2d:e2:
                    f2:1b:44:e2:3f:26:e7:15:8f:7b:0e:33:de:02:68:
                    09:dc:b6:b6:be:4b:c2:a3:5e:d1:76:1d:72:2b:c7:
                    3e:6e:d3:37:32:8d:40:56:05:ad:7c:d5:43:3a:59:
                    d3:00:d8:28:25:d7:5b:62:55:02:2f:96:07:ad:a0:
                    2e:3a:ba:50:9a:95:cd:59:07:ef:5b:52:cd:e4:1e:
                    7a:11:23:0f:03:2f:a4:57:76:c1:90:7b:89:56:fa:
                    4f:79:22:62:7e:fe:02:0f:0e:12:95:7e:70:15:21:
                    bc:e1:e1:4f:01:b2:65:8a:58:cf:fc:a3:84:eb:69:
                    eb:f0:69:8c:d0:f3:fc:b9:4c:34:0d:3a:7e:b2:b4:
                    57:19:e4:83:e2:08:2b:3d:53:98:51:32:3f:d6:0e:
                    7a:79:40:ac:79:bc:33:aa:62:c1:fc:7c:35:3d:2a:
                    a2:2f:e4:2d:4b:85:bf:00:2c:9b:8f:fc:d9:0e:c7:
                    94:bc:d2:a3:3e:1c:02:ba:4b:6c:c0:7d:45:d8:a0:
                    c4:12:d3:dc:4c:25:1d:6c:64:10:18:ab:57:3e:5e:
                    f4:f9:fa:e6:fa:45:b6:bc:54:5d:6f:2c:6e:1e:ff:
                    bd:63:ea:80:cf:2d:01:73:57:67:5b:d7:e3:ca:74:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:C8:15:0F:5F:94:CD:9F:98:82:E0:86:B6:D9:B8:7B:C7:4E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/14c6bd91-791c-37e8-bb9c-d847c0d361c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/20
                IPv6:
                  2602:fd43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:24:c2:26:30:17:2a:a3:a3:37:b4:a8:25:c2:32:49:0e:65:
         a5:69:24:db:c3:93:2b:6a:32:91:19:c5:6e:35:c7:50:a7:13:
         f4:5e:a7:18:be:df:2d:62:57:55:a5:6b:8c:47:b3:ea:ec:d4:
         3a:d5:fc:68:fa:a6:75:f9:90:93:fc:fc:b7:5a:58:18:89:50:
         08:b4:01:54:4f:b4:49:01:3a:65:03:98:12:d3:8c:80:1f:73:
         d0:68:df:70:63:88:4a:d6:87:b7:ef:02:46:90:df:fc:c4:0e:
         97:43:5c:63:c2:64:c2:f3:c0:e4:75:17:9b:64:ff:b6:2d:07:
         40:24:6d:38:77:bb:43:44:62:e6:8a:78:c6:fa:d0:69:8b:a9:
         48:b0:4e:f5:f7:c4:11:cf:11:1e:c4:12:c5:de:9a:f4:0b:36:
         f6:87:84:12:63:0a:71:c1:85:ff:dc:55:c3:37:67:68:b5:98:
         bb:14:01:e7:76:48:2d:bc:99:fd:7a:57:e2:bb:45:af:69:bd:
         cf:96:8c:82:ca:b9:d6:b2:41:6d:91:54:8c:0e:61:ad:80:15:
         11:a9:ea:24:ad:2a:de:98:89:d5:75:54:24:46:4d:f9:ee:ef:
         47:ea:8d:1a:ea:83:a6:54:23:52:09:9a:95:ef:72:c9:1b:f4:
         c7:30:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:31:36 2025 by rpki-client