Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa
File:                     3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa (raw, json)
Hash identifier:          uV2194EoVR5iChpPD3S3i4BGjWA4Iknb64Uqmh+2RU4=
Subject key identifier:   77:2C:D1:DA:D5:D8:40:61:FA:72:09:5C:5D:C0:02:8A:0E:2D:6D:AC
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A3A128759C4071CDC5C212A00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa
Signing time:             Wed 18 Jun 2025 00:54:59 +0000
ROA not before:           Wed 18 Jun 2025 00:54:59 +0000
ROA not after:            Tue 16 Sep 2025 00:54:59 +0000
asID:                     0
IP address blocks:        173.96.0.0/11 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:12:87:59:c4:07:1c:dc:5c:21:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun 18 00:54:59 2025 GMT
            Not After : Sep 16 00:54:59 2025 GMT
        Subject: CN=d6d9e237-7945-4ef8-abbc-159a35497ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:02:45:83:4b:c3:f4:9c:eb:55:01:5f:94:
                    e9:a0:2d:91:56:8f:78:c5:31:24:ac:ab:05:ee:1b:
                    f0:da:60:92:b7:05:b3:db:b0:81:62:5d:7c:37:bd:
                    da:46:2c:26:1e:79:4c:93:5b:99:11:5b:91:d1:01:
                    72:3f:bf:a3:48:5b:95:e1:08:78:ac:59:f9:1a:c5:
                    e7:56:c9:d2:25:c6:52:b3:7e:a1:f5:0d:3b:c0:f4:
                    7c:2d:c6:27:2e:d9:fa:4d:fe:43:da:8e:fd:03:09:
                    33:51:63:ba:a8:70:e1:51:25:9c:a0:74:e9:87:a3:
                    1d:b0:0a:46:1e:97:af:3e:f2:bb:6d:55:30:17:e1:
                    ba:82:26:ec:28:85:15:73:36:35:11:e9:3e:04:bd:
                    a0:ea:3e:e6:fc:1b:b8:e0:7c:4d:9d:fc:39:c3:dd:
                    43:93:98:9e:59:5f:54:39:27:9f:58:ee:81:9a:8e:
                    a2:2e:3a:86:64:22:2a:8c:b2:51:d0:65:85:52:9c:
                    16:c6:ce:3a:dd:a9:e1:ce:12:ce:c9:50:81:a9:35:
                    f3:0f:21:40:83:08:bf:03:63:96:0f:c3:24:de:42:
                    23:ab:36:2b:a1:ab:52:1e:89:50:a1:bd:a4:71:09:
                    6b:99:ce:5e:dc:20:ec:d7:0e:c5:7c:06:de:43:c9:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:D1:DA:D5:D8:40:61:FA:72:09:5C:5D:C0:02:8A:0E:2D:6D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.96.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3e:44:08:03:11:81:a0:b3:42:59:5b:a4:03:35:17:af:04:
         34:82:4d:a5:55:bf:2b:f3:94:1e:5d:d2:43:a7:7b:0a:80:2d:
         60:e2:cb:c1:6a:c7:9b:41:2b:62:91:9f:4f:c2:42:5f:00:6a:
         86:e3:e4:d6:e8:e8:07:db:40:ef:f0:1e:b2:61:f9:26:c6:d3:
         65:63:2f:4d:62:d3:8d:b6:e4:c7:70:a8:ff:e1:26:b2:9d:04:
         57:4d:75:a9:4e:d1:e9:08:dd:8d:46:e9:fd:26:9b:17:25:cd:
         5a:9f:1c:83:4b:27:d1:d9:e7:08:a1:fc:dc:97:62:f3:93:3c:
         d9:65:08:4d:c4:58:0e:f8:bb:49:c5:4f:f7:88:d5:e8:d1:bd:
         4c:c6:a2:58:1c:10:7a:4b:cc:12:c9:fa:33:b8:9c:3b:e9:ce:
         3e:2b:69:b4:ab:7f:77:61:0c:29:b2:22:a2:a4:c8:da:7a:f6:
         e9:2c:c1:dc:2f:c0:ac:77:dd:0d:42:f7:82:2b:75:a0:ea:2c:
         53:76:b8:aa:f3:da:9a:aa:b3:9b:8b:8d:6a:97:48:ea:2f:a4:
         5e:78:b2:21:5b:7b:8b:44:43:a6:86:77:c1:47:b1:e7:d7:59:
         53:cd:11:e9:9e:01:60:5b:94:62:d1:4f:f5:e0:aa:17:a1:8b:
         cd:1a:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:29 2025 by rpki-client