Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa
File:                     b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa (raw, json)
Hash identifier:          cHkRiI8sCFMBHa7x8Eqls2UQuiSYkulFMULqEzd09IU=
Subject key identifier:   3B:60:F8:CB:6D:10:B1:86:EC:94:4F:49:74:74:08:28:2A:46:30:DC
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584A411057D2FBA33A6EDC1A1DA0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     10430
IP address blocks:        169.204.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:57:d2:fb:a3:3a:6e:dc:1a:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=172012d3-a76d-4577-bda3-5f55d8292a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0a:0b:cf:90:8f:b6:5e:f7:16:95:68:2b:89:
                    e6:4f:ea:61:f4:df:5e:b0:90:e6:4b:b7:9a:a2:00:
                    53:a1:8c:6e:a5:c3:2d:3d:fa:80:d8:72:92:b5:9a:
                    51:59:ac:44:6d:60:53:58:18:e2:61:d9:c1:7b:fc:
                    d3:c6:3f:eb:4d:89:5f:74:27:9f:92:f9:77:38:51:
                    92:28:57:13:cf:26:1a:9a:6b:4b:96:a7:93:de:d7:
                    c5:53:fd:b6:58:67:10:5d:82:94:31:cd:1d:17:9b:
                    85:b0:fd:4c:1f:ed:a9:1e:9a:a1:a6:55:5c:02:e7:
                    b1:66:a0:8f:71:ba:7d:4d:e3:6f:e6:f3:01:74:2d:
                    17:3f:ef:85:17:36:ed:74:08:4c:53:af:26:7a:b7:
                    14:4a:80:52:8b:1b:2f:02:df:74:f1:8a:c1:14:db:
                    0c:68:dc:ac:c5:de:21:e3:08:95:97:6e:f2:5a:99:
                    70:d0:ef:09:d4:84:d4:b4:32:84:e6:5c:56:37:32:
                    76:0e:12:b9:54:8f:ad:78:ef:f2:5f:36:d0:bf:24:
                    b0:b1:28:f4:cd:07:c1:f1:c8:76:6e:15:8f:6b:f3:
                    0b:96:e2:ec:72:8c:cf:7a:33:33:23:db:fb:62:f8:
                    25:b4:57:12:57:04:9a:a1:ce:e6:ac:e1:ba:5d:cc:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:60:F8:CB:6D:10:B1:86:EC:94:4F:49:74:74:08:28:2A:46:30:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:cb:da:23:57:02:52:00:75:c7:d5:2b:fb:6e:4b:da:c9:
         f6:d2:c9:e8:0b:12:3d:84:3e:7b:f0:c8:88:02:24:33:1f:e8:
         5d:21:dd:04:88:20:62:f0:96:6f:1f:da:a5:59:6b:7c:a0:22:
         11:aa:08:26:6f:00:03:b8:3f:61:02:c9:fd:b8:cf:5b:f8:93:
         31:40:ef:0c:49:25:24:3e:98:5c:e4:32:e7:66:7c:ca:94:8d:
         e1:e7:9a:7c:35:63:cc:15:c9:46:26:15:d9:77:4e:31:66:7f:
         43:51:e9:9d:93:f9:84:39:97:41:ae:77:b0:ff:db:30:00:70:
         f9:c7:e3:d6:17:5e:2e:93:04:48:6b:12:7a:46:77:6c:c4:14:
         9a:62:39:a6:1a:f0:a5:bc:21:f9:4e:ac:53:c0:a7:8b:82:fe:
         a1:29:f4:58:e2:ba:93:0e:60:5f:58:e4:78:db:05:2b:60:2d:
         69:a4:04:61:cd:33:67:37:c7:45:7b:87:b4:c2:a4:2d:b1:16:
         cf:ac:d7:b4:7a:73:45:b0:12:98:60:51:56:cd:bc:92:5f:5b:
         ca:40:a5:58:90:0d:ce:d0:a8:9c:6c:65:f3:65:47:fa:0d:53:
         d3:08:2a:05:9e:97:ff:bf:db:50:99:c5:71:a8:f8:1a:e9:9b:
         b7:7b:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:09 2025 by rpki-client