Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
File:                     f42044dc-4bba-3889-9d93-7be101a8b14b.roa (raw, json)
Hash identifier:          HXUTZognLrIu8lbY7yXgCrShuRQDZWSmDr+L9y98dvk=
Subject key identifier:   DF:9A:60:A9:61:02:DC:C6:0C:CB:91:E5:9D:C9:28:AE:F9:9F:C8:F0
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584A374AD541D53E7E93DCA98F60
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     400928
IP address blocks:        76.164.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d5:41:d5:3e:7e:93:dc:a9:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=4b4c8304-1b1c-4a3c-9fd7-1c767c27e90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:8f:f5:af:6a:17:60:0e:75:84:bf:d0:7c:
                    c9:e3:ca:b7:d0:db:02:16:a1:64:a9:f6:6f:fe:d3:
                    e7:1e:55:02:16:c9:85:37:92:c5:68:89:1b:c6:b7:
                    d8:ce:23:cb:69:00:81:c3:72:30:87:ba:fd:0d:8f:
                    01:50:c9:15:48:06:6e:50:4e:fc:63:41:78:cd:e2:
                    f5:76:c3:74:17:72:ae:ca:a8:5a:0f:c3:ca:25:f6:
                    72:7a:b0:38:f3:49:88:d4:1d:fd:f7:71:c4:2c:b6:
                    e4:38:9d:6b:a1:07:34:2a:d9:1a:1d:f5:79:40:de:
                    c5:b5:68:51:86:55:20:82:7a:5a:eb:22:a3:8b:87:
                    e8:99:f9:6e:78:3d:87:95:4c:95:60:d3:38:df:62:
                    66:90:34:b6:6c:29:e2:a0:9c:04:b3:28:2f:e7:c2:
                    d9:c9:1d:59:73:07:ff:c8:76:f1:3c:ae:59:7f:81:
                    04:55:56:71:93:46:3c:58:6f:eb:b5:ad:e2:c8:39:
                    00:df:21:fb:47:96:28:e1:a7:11:3d:c7:69:ba:f4:
                    6b:52:3c:05:19:ec:ab:92:6b:2d:82:c4:36:dd:26:
                    b4:4b:5c:79:8a:b1:57:71:92:65:6d:4d:3b:cf:e1:
                    32:d5:64:6e:fd:b7:9f:6f:5e:57:49:89:de:cd:27:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9A:60:A9:61:02:DC:C6:0C:CB:91:E5:9D:C9:28:AE:F9:9F:C8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:5c:cf:ee:a7:d6:b1:04:24:4b:0b:11:76:4c:1b:86:5a:
         4c:95:4b:b8:ca:63:d1:19:59:3c:d2:7a:2f:ba:2f:7a:0a:1f:
         fc:5f:3e:28:97:79:d1:09:df:23:d9:9c:e9:33:d4:90:32:4d:
         84:4a:44:fb:f3:dd:d0:aa:16:9c:aa:fc:95:3b:72:24:02:f2:
         de:30:f4:f9:b1:3c:0a:fb:5a:ed:85:6f:c3:93:fe:f5:c5:f4:
         4e:59:b3:85:87:49:86:1a:44:26:75:1c:a7:e7:0a:56:2e:0d:
         52:bc:8d:e8:ed:7b:2a:ee:cc:f2:19:8f:24:9f:b4:95:1e:9a:
         0e:13:ca:50:7d:91:4f:c6:2e:47:ca:0e:5d:94:b8:9b:5f:ab:
         be:ff:86:b3:70:63:a3:b4:b4:93:dc:f6:7a:63:36:ea:4f:fc:
         53:28:75:e6:7a:ad:c6:4b:c5:0e:be:f5:f9:6a:ba:0a:9c:3b:
         3d:01:36:66:c0:ff:e5:9b:a4:b0:90:5b:27:d3:7c:91:09:ed:
         4c:46:96:53:0b:27:fe:60:e6:5c:de:19:96:41:01:a5:7d:ea:
         5a:3e:83:fd:2b:10:ab:71:6b:51:fa:6f:6b:23:ab:e7:1a:3b:
         cb:a8:71:63:4a:71:f9:07:18:36:17:c6:92:37:e3:d8:70:6d:
         b6:ed:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:22:34 2025 by rpki-client