Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa
File:                     0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa (raw, json)
Hash identifier:          UodU/UFS1GaxQiJVNTZFAcd1LmQQs55pZAYrYAFpmc0=
Subject key identifier:   D4:58:4A:99:93:60:34:E7:E2:1C:7A:64:30:45:65:6D:E3:30:60:82
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A42FA22F218F948B7D8ED9A80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa
Signing time:             Sat 21 Jun 2025 05:28:06 +0000
ROA not before:           Sat 21 Jun 2025 05:28:06 +0000
ROA not after:            Fri 19 Sep 2025 05:28:06 +0000
asID:                     6922
IP address blocks:        204.158.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:fa:22:f2:18:f9:48:b7:d8:ed:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jun 21 05:28:06 2025 GMT
            Not After : Sep 19 05:28:06 2025 GMT
        Subject: CN=fe7b8410-15a4-42e8-99b6-1f4a98eed15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:ac:24:4d:ee:c1:a2:07:d1:e6:7b:a1:49:
                    78:40:b0:7c:d0:09:c6:6b:fc:da:f6:55:4d:fe:53:
                    f8:d2:63:06:19:b7:e2:d3:6a:6a:b1:ed:0d:d1:92:
                    d4:6b:94:f5:41:8a:6f:63:d2:e2:6e:78:9d:fa:1f:
                    c5:e3:6a:2c:1d:86:bd:56:3b:d6:32:c5:17:95:40:
                    cd:a2:e5:ee:7e:75:d5:c8:64:e0:ea:d0:3c:02:b1:
                    28:91:d7:53:06:ca:e9:8e:c1:0c:06:7d:7f:fe:73:
                    fc:49:13:78:8f:67:8a:d9:65:97:f6:85:a9:b2:94:
                    e9:3a:61:04:78:67:8d:c2:bf:21:e3:f6:41:eb:cb:
                    72:0c:b9:e7:61:24:f8:c4:13:50:61:31:33:22:f2:
                    e5:50:a6:e4:6e:49:a7:ed:13:c5:e1:bb:b5:70:75:
                    8f:08:d2:58:2e:d1:83:22:07:a8:4f:3a:92:df:28:
                    f2:4b:25:68:35:84:89:23:a1:11:6a:2b:26:bd:33:
                    a3:d1:d1:6b:ce:6e:13:fb:38:c9:7a:b2:76:3d:57:
                    c3:14:f3:0a:98:cd:31:6b:92:69:98:53:b0:00:19:
                    bf:21:f8:2a:ee:78:df:d1:61:bb:c5:97:02:62:b0:
                    d2:9f:ab:fa:38:a7:74:2f:15:96:8a:8b:87:3b:e4:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:58:4A:99:93:60:34:E7:E2:1C:7A:64:30:45:65:6D:E3:30:60:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:83:ee:a7:94:38:d1:b0:b8:78:9d:31:77:dc:72:6c:d3:71:
         00:8a:39:b6:8f:92:7b:46:bd:5d:18:3f:ec:d5:79:d4:d3:5a:
         36:91:5e:44:5d:0b:98:7e:97:db:02:d9:7a:18:91:1a:44:ff:
         0c:97:6e:70:35:d9:09:d0:36:a4:03:4e:93:88:ab:a5:11:7b:
         07:11:0a:13:9b:8a:e4:b2:74:3c:d2:cc:3c:bb:26:90:ee:19:
         8d:8c:45:f2:cd:88:a3:5f:f8:2f:a0:f2:1a:c2:57:5a:19:9b:
         74:43:63:c1:0f:f4:d4:1a:38:ca:19:a7:4f:45:5f:e8:cd:f7:
         87:80:b0:d4:f4:03:d4:c9:88:34:73:a2:62:96:a6:dd:05:55:
         34:86:d4:66:70:99:50:8c:97:72:90:41:67:23:a5:73:57:c1:
         e9:f5:f5:da:a2:2c:f8:c7:22:d4:6a:5c:ea:36:a9:11:5b:53:
         5c:c7:69:2b:08:7b:63:bf:7c:4d:3c:83:af:8a:42:a8:4e:17:
         a9:bf:b2:8d:cd:08:64:5f:f1:90:41:b3:4f:1c:fa:4f:ea:d8:
         ec:6f:91:94:72:02:94:18:14:3c:d5:73:9a:dd:3b:fb:dc:1b:
         69:fe:a9:e2:db:82:04:a7:0a:bd:86:be:29:29:62:5f:44:e3:
         dd:db:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:43:24 2025 by rpki-client