Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa
File:                     9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa (raw, json)
Hash identifier:          4Zhgv/TQRasYK2wcupNWQzXdSCREM/R1jO+OgN5d3vA=
Subject key identifier:   54:03:2B:3C:15:FA:F2:30:71:E6:FF:CD:D3:33:3A:1E:C2:B5:F8:32
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A35EB212FDF00EAA751E0CE60
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa
Signing time:             Mon 16 Jun 2025 13:12:22 +0000
ROA not before:           Mon 16 Jun 2025 13:12:22 +0000
ROA not after:            Sun 14 Sep 2025 13:12:22 +0000
asID:                     198949
IP address blocks:        64.103.40.0/24 maxlen: 24
                          173.38.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:eb:21:2f:df:00:ea:a7:51:e0:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 16 13:12:22 2025 GMT
            Not After : Sep 14 13:12:22 2025 GMT
        Subject: CN=12f1f404-50a1-48ac-8fa0-085ca7758e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:85:55:38:14:c5:c2:4c:ba:64:31:f1:6e:
                    7a:fe:83:c1:57:81:ea:4f:83:d0:fd:89:22:8e:6c:
                    2f:dd:d1:50:36:b6:a5:64:a3:b2:7b:7e:d1:34:9f:
                    62:39:5d:ad:c1:fe:3e:3f:dc:a4:7e:5f:d4:a9:20:
                    4c:77:90:d6:d7:0b:da:ad:cc:1b:28:54:2d:ae:06:
                    80:b7:05:70:ad:df:7b:ec:ee:1c:36:79:d5:21:95:
                    63:a4:51:0a:c0:50:8c:54:ab:7b:a0:e0:84:30:7c:
                    be:08:d6:23:a6:7a:6b:21:31:77:a3:dd:a4:f6:af:
                    9d:43:74:13:5f:d7:7d:42:c5:b3:8c:d4:58:40:28:
                    ae:bf:13:ea:70:b3:b5:da:ae:ea:3e:98:1d:fe:d0:
                    16:3e:81:eb:86:00:7f:4e:5a:64:71:8f:ca:e5:76:
                    56:d6:b8:57:f9:95:2d:df:c3:d9:ee:f2:29:4b:d0:
                    ae:a3:6d:2b:85:a0:56:d6:38:78:6c:00:2e:d5:75:
                    02:ec:5c:5e:34:3a:c6:02:40:5d:ad:e2:68:34:e1:
                    47:d7:78:ec:8b:85:6b:63:b5:f6:cc:d9:71:18:d8:
                    37:84:ef:f9:3a:bc:05:f0:eb:c2:28:1c:bd:2e:08:
                    ac:b2:df:32:e2:a6:82:9b:e6:97:fa:90:6c:6c:4a:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:2B:3C:15:FA:F2:30:71:E6:FF:CD:D3:33:3A:1E:C2:B5:F8:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9da26b9f-7ece-3cdb-8af1-3f31ae5543c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.103.40.0/24
                  173.38.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:8c:ec:a8:9a:9a:85:03:de:fd:5a:73:e6:98:35:b1:6b:
         81:61:5e:ad:4e:16:08:6a:5b:3f:2f:66:ac:7a:68:7e:f7:3c:
         4e:2c:ca:41:1b:35:77:3a:e5:3d:40:40:c2:90:8e:b3:e5:6f:
         96:95:20:a3:8f:cc:9c:0b:16:9e:48:20:15:c4:12:7c:3d:9b:
         a3:b1:c6:b4:65:14:50:9f:c8:7f:4d:68:a6:02:32:8c:be:5b:
         e2:85:1b:d0:2c:fd:3a:a8:0c:45:23:74:32:bf:9e:c5:db:a6:
         c6:da:26:11:25:14:46:8f:65:19:38:7a:a3:fa:99:76:93:db:
         a7:69:d1:e6:e8:0a:f4:e1:cc:35:82:55:e7:95:0a:d5:f3:39:
         83:5f:5c:0a:b1:44:26:e9:6c:0c:41:ae:cd:f0:d6:62:51:2b:
         95:6b:84:0b:8b:af:d2:98:0e:a2:6a:38:20:c1:a1:6d:eb:7d:
         24:37:fe:07:4c:f7:47:2f:68:b2:da:a1:d9:d0:ee:49:6e:8e:
         ca:3b:47:d0:2a:15:e1:1d:63:bd:1c:d4:39:5f:57:71:00:29:
         16:8f:3d:3a:db:85:64:46:80:cf:18:b5:6f:71:14:09:85:e2:
         08:73:2b:28:4a:48:4d:68:f9:10:dc:db:01:c3:ac:86:38:86:
         e9:10:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:59:11 2025 by rpki-client