Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6884892-b5f6-3b73-950a-895959906db5.roa
File:                     b6884892-b5f6-3b73-950a-895959906db5.roa (raw, json)
Hash identifier:          IT3wXkSSY2XFKX8DCw9RZ69pYPfgR1gAKaJujrey6GM=
Subject key identifier:   4C:18:30:19:E7:0C:16:9B:45:D3:39:D0:E7:79:EC:06:0E:42:9A:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD336D1E1BC3055608DC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6884892-b5f6-3b73-950a-895959906db5.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33667
IP address blocks:        209.23.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:33:6d:1e:1b:c3:05:56:08:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f62ad50d-6aec-4986-84bf-858ccdcbb2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:12:4b:ea:c4:3e:73:09:a7:e2:d9:a6:42:
                    4d:22:d3:0f:d5:18:36:73:43:1e:ea:15:af:a6:58:
                    5a:4d:32:42:0d:21:a7:c1:0a:d3:6a:7e:f3:c8:b1:
                    e7:04:43:30:43:b1:c5:33:b0:82:aa:f5:9f:d9:db:
                    88:cd:74:38:77:83:0b:74:14:a8:90:23:c5:31:2c:
                    49:e5:ed:81:f3:0a:c1:03:88:84:1f:c4:9a:7b:75:
                    23:f6:87:f6:f8:32:0c:54:b8:9e:04:1e:63:8d:b2:
                    47:31:06:36:5c:1d:fc:60:32:30:f2:c7:2f:20:d3:
                    f6:dd:d4:92:0e:ac:a4:e7:bb:f5:6e:74:3d:67:f1:
                    f1:2f:73:0e:51:0b:af:63:42:c8:7a:1e:1b:50:ff:
                    4c:ee:2f:ca:5a:71:fa:57:a9:85:2d:89:ef:d5:12:
                    3a:46:47:b8:57:3a:5c:3d:df:28:da:4e:0b:36:a4:
                    52:2a:be:2e:6f:71:99:6e:05:60:02:d7:d5:8a:bf:
                    dd:fd:55:1a:ec:cd:9e:9e:18:b2:54:33:3e:ea:91:
                    b0:d0:bb:9b:5b:3d:3e:ec:30:ec:cd:ed:d4:13:81:
                    c6:3b:8d:8c:41:f1:39:c0:19:12:3c:0b:34:24:e6:
                    a2:39:1b:31:2d:81:be:ae:fd:4a:22:9c:35:69:d0:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:30:19:E7:0C:16:9B:45:D3:39:D0:E7:79:EC:06:0E:42:9A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6884892-b5f6-3b73-950a-895959906db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.23.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:e6:12:92:4f:7c:c7:1d:ed:9a:63:c9:b3:b7:46:e1:08:
         ec:42:13:a5:40:df:9e:9e:92:8a:cb:37:5d:91:20:45:00:ce:
         d2:32:27:a2:14:33:e2:44:1f:5a:f6:0f:ae:cd:64:da:82:25:
         e8:35:26:66:13:f8:63:fb:a1:62:be:a8:0d:0a:db:8f:ce:fe:
         d9:64:6a:fd:30:ec:a8:08:b6:5c:f1:99:99:9d:57:23:fc:2b:
         90:9c:8e:b1:bc:a7:21:b9:e5:15:52:46:ce:fc:c7:75:a2:3b:
         89:6e:9c:2d:1a:43:c6:bd:36:67:de:39:31:1f:44:ba:68:7d:
         47:ab:13:41:fb:b2:c7:61:bd:90:f6:94:ca:6a:16:9f:df:db:
         42:cb:da:69:6b:7e:4f:bf:a6:43:41:2f:b5:90:35:aa:40:bb:
         4b:bf:d6:16:23:f9:f8:ec:f1:01:24:f6:d0:18:7d:1f:f6:f9:
         e0:ec:91:89:09:84:cf:04:ee:67:cc:c0:9e:4a:34:fa:62:2d:
         5a:8f:1a:a8:38:bd:24:35:ac:24:27:e6:df:48:76:5b:d1:0a:
         46:dc:c6:30:97:25:74:a5:f2:d1:1a:09:74:64:02:b6:ce:f2:
         05:f7:5c:1a:ec:87:90:2e:3d:fb:ad:f4:39:a0:1d:60:ec:f6:
         2d:07:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:09 2025 by rpki-client