Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/775c59cf-a009-3c3a-af3f-822f7545d129.roa
File:                     775c59cf-a009-3c3a-af3f-822f7545d129.roa (raw, json)
Hash identifier:          ssix7j2/9A5u5qRxVy4AHA6Wn0QyDb7aLD1gLN2k8hQ=
Subject key identifier:   E8:E9:04:87:F5:BB:61:6B:F8:EF:75:41:8D:0F:9F:4E:31:E7:F2:32
Certificate issuer:       /CN=7fda64e4-af3e-498c-8889-c19ec3811b83
Certificate serial:       010D0C9F4328584A49706475E18F30A3D3072000
Authority key identifier: 37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/775c59cf-a009-3c3a-af3f-822f7545d129.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     398465
IP address blocks:        204.63.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:64:75:e1:8f:30:a3:d3:07:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fda64e4-af3e-498c-8889-c19ec3811b83
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=c092350b-61b0-4a7b-83f4-a2bec278bdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:d3:9d:8a:48:2c:8b:a4:ad:ca:59:94:c8:
                    a7:a5:6b:74:ba:1c:fc:9b:45:fe:34:29:8b:2c:c5:
                    63:2d:13:1b:d5:6b:d2:40:ef:58:eb:64:af:3f:dc:
                    ca:51:73:be:54:c7:6d:c3:a3:61:23:b8:ca:b7:f7:
                    b3:75:83:56:0a:86:a8:33:ef:20:fb:1f:fa:77:34:
                    60:33:47:33:1d:01:a8:85:9a:f5:91:59:89:82:42:
                    c9:60:fb:8f:7f:22:14:6c:3e:de:75:39:ae:86:35:
                    3a:cc:ff:02:be:5e:9e:c7:b4:84:9a:35:ef:f6:b7:
                    6b:d8:a0:53:2b:98:ad:7b:94:37:d4:b0:29:4d:de:
                    f5:a5:62:97:63:10:3a:25:e7:ec:8b:db:01:8e:90:
                    c1:75:7a:ba:c9:31:4e:d5:7c:89:07:c3:eb:ca:f0:
                    20:ad:4c:8a:eb:6a:37:ea:de:e1:c9:61:49:b0:50:
                    87:47:40:fd:4c:4a:e3:54:1c:ca:e8:49:27:68:a4:
                    03:77:0d:36:f3:bf:fd:fa:e6:bf:b0:b1:e7:4f:fb:
                    0e:a5:a3:ca:a6:e2:53:fa:d5:d7:40:78:a2:ca:f8:
                    b5:4e:cf:82:5e:ca:74:70:f4:95:75:e9:4e:ba:42:
                    d1:3d:d7:8b:db:1d:96:0b:37:a7:9b:a3:f7:4b:91:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E9:04:87:F5:BB:61:6B:F8:EF:75:41:8D:0F:9F:4E:31:E7:F2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/775c59cf-a009-3c3a-af3f-822f7545d129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl

            X509v3 Authority Key Identifier:
                keyid:37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5d:20:9d:3d:95:a1:d9:86:14:30:b3:c7:56:bf:7d:3b:72:
         f5:93:e5:c8:24:5d:af:b0:15:39:da:6b:ab:45:e1:cc:f0:3c:
         48:cf:14:f0:7a:93:3a:22:bc:c1:18:ec:9e:53:4f:42:5e:4c:
         78:54:69:57:3a:c7:92:1a:22:02:9c:cd:e9:17:b3:3b:ea:4d:
         71:1f:65:83:8a:e9:04:9e:89:b3:3e:e1:a6:40:c1:ca:92:fc:
         68:21:c4:b0:c3:e7:5a:48:18:d6:44:6c:bb:73:08:01:17:ad:
         e0:74:aa:74:87:b0:6a:fd:0b:2a:85:fd:5c:97:c2:3b:0e:41:
         e7:9c:f5:5f:10:bf:63:77:55:90:1c:2d:3c:b4:14:e9:40:a3:
         0f:bd:16:c8:65:fb:51:e1:f6:94:1d:03:07:c2:e0:8b:f2:e7:
         de:a8:42:fa:6f:37:ce:6d:1f:c9:87:aa:24:1b:9e:76:00:d9:
         d2:05:a1:45:90:00:b8:40:44:00:88:0b:e0:f8:af:7d:74:1b:
         a7:c0:d2:a5:da:24:65:82:78:e3:01:70:a5:50:8b:d9:77:c3:
         17:26:9c:fc:00:40:a7:7a:f2:45:68:69:63:d2:8c:e5:7d:af:
         7c:78:e6:82:12:e7:4f:b9:e6:47:9e:c5:d2:c4:cf:9e:cd:29:
         71:b9:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:47:51 2025 by rpki-client