Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
File:                     b938ef69-2886-35a9-9252-032a68a12f49.roa (raw, json)
Hash identifier:          aMhFKbWJPtWgt1YFWgWpqILkckpzTSye1vWLoJuyreQ=
Subject key identifier:   23:BF:F0:3E:E1:C4:8F:E2:57:C7:3C:6B:92:F5:2B:86:82:6B:5C:D5
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A30503856BD2311F55D9E0680
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     11290
IP address blocks:        209.15.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:38:56:bd:23:11:f5:5d:9e:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=4abc51a0-f2c7-4259-b8e1-36a25a034d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:25:28:0f:fe:ca:6b:17:c2:d6:b6:2d:cc:
                    2e:25:4a:df:09:51:c1:da:9a:f7:6e:be:7e:3c:54:
                    ac:5b:da:62:56:11:c7:7f:9a:df:85:26:ac:44:15:
                    37:48:61:7e:6e:92:21:f1:ab:b6:5f:22:57:f4:20:
                    62:81:85:51:76:cb:96:cd:89:3d:31:de:dd:a9:2d:
                    5f:a7:79:2d:6c:e0:d7:48:b7:ef:9d:71:88:28:6c:
                    22:cc:db:c6:6b:0d:4b:4c:44:f0:c3:d9:52:2a:65:
                    c6:ba:8a:0e:ca:b3:04:1e:98:55:31:14:84:55:8b:
                    96:74:e0:f4:c0:51:5e:d7:5f:55:da:9c:40:2f:4f:
                    f9:57:fb:0a:b6:2b:e1:16:42:ff:9f:04:e5:fd:79:
                    71:ed:c5:e0:e9:a7:68:42:d2:77:ab:9b:50:db:30:
                    92:36:70:1f:91:7d:85:5e:29:90:a6:fa:b3:38:30:
                    33:9e:9f:82:d7:b7:9c:a8:61:71:89:a2:da:df:e2:
                    77:fb:80:a6:29:61:f7:8d:19:12:e4:09:69:eb:18:
                    e5:9b:9e:ec:93:03:ff:9e:db:ce:38:1d:0c:8a:46:
                    cc:cd:f4:5d:7a:36:80:9d:62:b1:d3:8d:8b:bf:98:
                    cb:5e:e4:0e:cb:22:6f:8d:ba:f8:31:71:0f:77:86:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:F0:3E:E1:C4:8F:E2:57:C7:3C:6B:92:F5:2B:86:82:6B:5C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:17:49:26:96:31:5a:e8:49:fb:48:a9:ec:de:1e:69:c5:e9:
         d4:98:38:fc:16:de:33:3b:f1:40:9c:be:4d:b1:8e:2a:6d:0f:
         85:7d:c2:cf:36:5a:19:f8:ba:5c:f0:8e:0f:e0:8d:38:51:b8:
         f0:bb:f5:21:42:c1:ba:bd:8e:d7:8b:01:e9:80:70:50:2a:c9:
         2c:7e:f7:8d:d1:83:f2:a0:84:53:0e:7f:d0:76:0b:76:94:a8:
         09:be:33:eb:cd:b9:07:13:c7:3f:70:3a:2d:77:65:ba:7a:d9:
         64:df:0a:11:53:ba:d6:6a:a4:c9:34:2a:90:e3:c8:8e:17:99:
         d2:e5:d6:ef:e1:a6:41:1d:07:33:91:69:a4:fe:53:2e:ad:82:
         c9:2a:91:45:b9:0d:c0:2a:c8:65:66:c9:d5:73:3d:a2:e3:c8:
         33:35:e7:fb:22:e8:b0:c3:2a:f2:97:56:a7:32:f8:2d:aa:02:
         b5:30:2e:a1:fe:29:5a:64:ca:93:2f:dc:32:4b:ed:c4:93:27:
         0c:91:fb:ec:70:eb:fb:92:09:00:b8:56:8b:70:d4:35:53:22:
         b6:5f:5a:cf:65:66:a1:fe:e4:38:bf:e8:49:45:9d:1a:47:ea:
         a4:0d:a2:af:a7:dc:1f:60:9a:e7:57:1e:56:c6:a4:09:3d:87:
         83:31:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:11:48 2025 by rpki-client