Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
File:                     6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa (raw, json)
Hash identifier:          9Bws3Wnar+nFTSIMe1Tjp2yA5NCpW7b5OiTIFhaPHKY=
Subject key identifier:   16:A4:62:D5:09:EB:7C:4A:65:36:98:C7:0A:D6:CF:38:E8:54:94:98
Certificate issuer:       /CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
Certificate serial:       010D0C9F4328584A374AD1A61E03A35A0D690D00
Authority key identifier: 37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     398894
IP address blocks:        209.142.115.0/24 maxlen: 24
                          2620:98:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d1:a6:1e:03:a3:5a:0d:69:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=81453e6c-d2aa-4903-a525-5b2f6ec00ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:c4:54:40:dd:69:57:0e:3d:fa:48:a2:7d:
                    34:0e:3c:2f:38:6a:2d:4e:b0:cf:04:4d:7f:c7:b6:
                    e5:eb:a6:08:d0:58:29:87:07:26:ef:c0:45:65:f6:
                    38:4e:6b:f4:60:37:2a:0e:99:04:77:7e:05:4f:70:
                    86:10:6c:9e:5e:08:b8:ce:35:8d:93:54:81:97:0c:
                    3f:02:5d:8c:51:90:1e:a6:62:41:ad:ca:17:28:d0:
                    e0:60:49:68:e9:fc:a7:fa:ab:2f:ed:85:5c:8c:2a:
                    43:71:4d:ae:7c:ca:3f:fa:c3:9e:f2:86:06:40:f6:
                    c8:ad:80:36:8a:8d:e8:6d:e8:6e:88:f7:f9:dc:40:
                    88:dc:75:0d:55:c1:25:46:67:97:82:3f:ed:cb:f2:
                    66:8f:29:c6:af:5f:10:6a:22:4c:23:67:24:c3:1a:
                    2e:e4:fb:b9:64:56:0a:1e:4d:e2:bd:a9:84:d0:b5:
                    f4:4d:8e:a3:24:ab:a2:18:cb:e0:18:0e:b8:ef:24:
                    37:1c:45:ac:bd:72:c9:ad:ee:11:6f:e7:82:a6:5c:
                    16:e3:f6:6d:6d:3d:13:1c:93:a4:00:b9:4e:4d:5a:
                    83:73:19:c2:85:18:4f:64:46:9c:ea:62:a2:35:a3:
                    33:ee:04:63:31:03:69:0e:73:0d:2b:38:2d:ca:e1:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A4:62:D5:09:EB:7C:4A:65:36:98:C7:0A:D6:CF:38:E8:54:94:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.crl

            X509v3 Authority Key Identifier:
                keyid:37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.115.0/24
                IPv6:
                  2620:98:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:ed:0c:e3:c5:23:15:d3:6d:b5:9e:07:c8:1e:86:c3:88:
         4b:ba:33:6a:94:b7:8c:98:47:49:d2:27:a6:ad:ed:9e:00:49:
         00:55:f1:fe:56:fa:b4:0f:4e:00:e4:1d:a1:50:59:b2:6b:37:
         eb:70:ed:f4:7f:b5:bb:b0:e3:a2:84:43:e0:dd:9a:45:fd:e4:
         79:fe:74:5d:dc:88:57:b4:f9:d7:0e:f2:2d:d7:37:b1:30:ac:
         ae:35:4e:9b:91:eb:cd:16:35:1a:99:54:12:7f:e7:9a:3e:85:
         14:79:b4:25:31:00:7f:32:b6:d1:68:ac:d8:a2:d9:d7:1f:1d:
         6e:81:9a:96:04:84:b7:1e:55:68:ff:f7:eb:30:a0:6b:a5:1c:
         9a:03:21:87:3b:dc:21:ff:32:c3:ae:f0:8a:06:be:58:0a:54:
         83:cd:83:ec:56:3b:49:76:87:84:6b:d6:09:0c:b2:80:ac:30:
         15:ff:1a:83:be:25:c3:13:8f:7f:f3:99:67:2f:37:42:d8:81:
         73:7b:f2:eb:0b:b2:ea:dd:9f:0b:23:6a:8b:36:ce:8e:71:c4:
         bc:44:cd:0d:5b:c7:32:47:03:4c:4f:4e:10:6b:e8:a7:69:be:
         58:46:80:7c:8c:ae:9e:0b:cd:ea:e8:29:c8:de:26:2a:7b:eb:
         a9:a5:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:06:30 2025 by rpki-client