Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1cbe8829-73a0-3e3c-968a-95e187a1252c.roa
File:                     1cbe8829-73a0-3e3c-968a-95e187a1252c.roa (raw, json)
Hash identifier:          B+AvUQ/Hav+w/e0vjTK3qfruQ/uipfHNCMXNSoDva/s=
Subject key identifier:   38:62:49:85:76:A5:E5:C4:DA:19:FD:BF:E6:43:2B:99:39:D5:FA:99
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584A549B18A9FE3434A7A61D6F00
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1cbe8829-73a0-3e3c-968a-95e187a1252c.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     60261
IP address blocks:        208.69.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:18:a9:fe:34:34:a7:a6:1d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=090fbba8-4b1a-4f5b-974b-1c7b80ddbcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:68:e5:0e:35:34:ba:46:49:4e:98:73:30:
                    7d:82:b0:59:fb:26:db:fa:dd:ac:bc:5d:79:d1:37:
                    81:73:0c:b8:5a:2b:9b:c3:bf:1e:4d:be:e6:ad:2d:
                    63:bd:7c:22:57:8a:58:d4:dd:71:71:96:b7:87:7d:
                    5c:cd:87:5a:5e:79:10:2c:3e:8d:7a:f9:89:fe:70:
                    ca:7a:46:67:99:77:d8:37:d2:38:93:15:65:4f:e3:
                    a2:9b:2d:98:1b:b0:9c:2a:9f:69:fd:d8:2c:88:7e:
                    3e:47:e0:d2:fd:ee:cd:f2:3d:fb:ba:96:65:03:8d:
                    24:ba:2f:3f:1b:56:13:1d:35:aa:aa:3e:5d:0e:b6:
                    35:c7:20:b9:5f:90:dc:05:61:11:17:bd:a4:2f:e3:
                    c2:2c:c3:30:46:e5:43:78:0f:a6:bf:c2:cd:d6:cf:
                    98:02:31:07:a4:7b:90:fc:30:a2:ba:91:4e:e3:d8:
                    cc:c6:01:31:f7:47:80:98:78:30:76:26:d9:68:e3:
                    11:eb:56:32:6a:d7:88:e7:9b:cf:cb:e3:f8:2b:88:
                    e7:7a:c1:99:ec:6e:84:00:42:65:39:e9:b1:08:0c:
                    55:c2:2a:80:9a:45:e3:23:75:24:c6:a0:c1:be:cf:
                    9a:f9:0a:66:20:d9:92:62:c1:5b:71:bb:96:a5:94:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:62:49:85:76:A5:E5:C4:DA:19:FD:BF:E6:43:2B:99:39:D5:FA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1cbe8829-73a0-3e3c-968a-95e187a1252c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:b6:6a:c4:3f:3b:a4:48:dc:3a:ce:b6:d2:5e:53:80:ea:
         ec:e1:d7:e9:f4:5c:b2:ac:1b:7d:93:4a:37:91:f0:53:3c:3f:
         fd:18:d8:94:ec:09:a0:75:7f:f2:18:c0:0f:83:c4:6d:ae:c8:
         75:c0:c1:57:1b:43:8a:8b:77:d7:08:57:a4:6f:23:25:32:c3:
         d5:0a:79:98:ca:66:4a:dd:32:d8:29:47:62:9f:02:eb:9d:9d:
         8e:94:be:d9:09:ab:b0:b1:ce:de:be:3c:35:a2:5f:e7:b0:69:
         2a:17:1b:01:74:d8:29:14:10:f0:9c:1b:88:5b:d5:68:5a:5a:
         29:46:7b:0f:4d:bc:92:18:cb:a4:d4:49:cf:d4:28:e1:94:46:
         64:5c:49:68:56:d1:04:b9:96:f7:7e:56:ce:be:2b:03:99:31:
         7e:50:5f:af:bc:a3:3d:00:87:46:0c:29:d7:b6:2a:09:42:6e:
         14:d8:d3:b9:e5:2e:0b:94:b6:22:45:d5:be:c9:12:2c:e5:13:
         1d:40:d1:c4:8d:b4:ab:98:b1:dd:2f:4d:6a:55:03:12:26:14:
         69:e2:dd:64:a7:1d:8e:77:27:c8:d6:ff:02:6d:be:6c:4f:25:
         33:14:02:82:33:c9:4b:03:0a:d1:99:28:3f:4a:25:c1:3d:89:
         98:84:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:32:59 2025 by rpki-client