Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/507db457-ed93-395b-bfad-8aa0d178d5a9.roa
File:                     507db457-ed93-395b-bfad-8aa0d178d5a9.roa (raw, json)
Hash identifier:          vin8tbgAueBrR1d5YFpBgXeWA2sSchigKJw9/F0jEbA=
Subject key identifier:   0B:78:99:B7:CC:A8:6E:8C:08:11:A6:FB:1A:25:2A:C3:6F:C0:BB:1E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A545D222A4699CCB13B0E0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/507db457-ed93-395b-bfad-8aa0d178d5a9.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        209.97.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:45:d2:22:a4:69:9c:cb:13:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=23ccb057-a0b9-488b-b738-7d2e6e0d531f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:6d:84:96:49:5a:37:de:73:57:48:b7:ea:
                    1c:fa:8a:01:49:54:56:e7:1b:37:14:30:e4:de:83:
                    3c:66:e9:69:fd:36:91:81:cd:02:cf:39:36:d3:b2:
                    30:d4:d6:4c:bc:9b:4e:09:c6:0d:d1:56:e4:6b:f6:
                    79:ef:9e:61:04:90:39:57:a7:39:5a:42:b9:3c:2c:
                    86:e0:5d:b4:32:1d:67:0f:9e:46:a1:72:62:f7:7f:
                    14:b8:ae:2f:b1:e2:3f:db:0c:37:c6:ec:eb:0c:84:
                    ed:31:0e:38:e5:14:73:4d:ad:9f:24:81:39:05:80:
                    c4:93:9b:4c:63:66:79:81:15:82:d9:8e:e6:be:52:
                    c0:4b:66:56:a0:a7:87:02:38:aa:d3:b1:05:8a:a8:
                    76:d3:a2:1c:fe:4d:1a:b5:c1:b3:21:e4:45:2d:81:
                    d0:83:fd:bb:a0:ca:05:28:47:aa:c0:e9:85:76:8b:
                    63:3e:6f:a7:f4:63:13:be:99:33:83:30:79:49:e2:
                    5d:7c:37:96:3b:04:5e:60:3c:bb:b9:38:97:04:9b:
                    04:3d:d1:09:9a:0c:4a:86:ce:45:db:cc:0c:9e:4b:
                    38:65:b7:99:67:4f:ed:5c:c6:0c:04:2c:e7:c5:ee:
                    94:77:22:6b:4e:e6:59:4e:18:5d:e3:2f:05:1e:95:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:99:B7:CC:A8:6E:8C:08:11:A6:FB:1A:25:2A:C3:6F:C0:BB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/507db457-ed93-395b-bfad-8aa0d178d5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:db:04:ec:f7:87:ab:ea:37:28:d5:22:54:ca:39:55:73:2b:
         bd:c5:e9:84:a0:ee:df:9f:74:4e:bc:0e:bd:78:87:0c:ea:72:
         07:d9:ee:e4:92:e9:31:fe:d7:a7:04:63:4e:2f:33:71:9a:36:
         24:6a:f0:18:30:62:d8:1d:40:92:47:06:1e:eb:3b:37:2e:59:
         7c:de:e7:c3:2b:a2:d8:a6:9c:6d:4f:d7:7c:37:dc:77:c2:43:
         11:47:f8:ad:81:c3:57:a2:a2:63:af:d9:ed:8d:21:d1:ca:47:
         bb:d2:77:2d:43:09:9d:e7:96:19:8d:32:7d:ed:6e:7a:47:ef:
         b1:3b:c5:03:57:1d:56:08:4a:44:a7:d9:63:a7:e5:82:29:8e:
         87:17:e4:76:ce:53:21:80:07:61:a4:b8:04:13:37:63:86:73:
         54:c2:de:8f:4f:ac:cc:aa:0f:99:56:c9:e6:7d:52:83:ab:f0:
         39:9e:6c:df:63:07:07:71:cc:4f:14:aa:4b:e6:0c:b2:1f:3e:
         79:51:74:03:e6:da:66:c8:ab:c1:ab:b0:a4:0a:b9:cc:63:6b:
         d4:40:58:81:d4:dc:79:8d:bc:8d:1a:bd:37:88:6a:3c:ee:0f:
         2f:68:95:f3:bd:fd:43:0f:e5:71:f4:3a:3a:22:5c:7b:c7:41:
         65:d8:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:45:26 2025 by rpki-client