Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa
File:                     df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa (raw, json)
Hash identifier:          cpPp6fI/Qd8Zus1HdwLS4ARN2nXTnDzsRMtD8k8q+js=
Subject key identifier:   89:DD:35:73:3F:36:60:18:0C:F1:95:A6:BC:D7:E5:92:E6:D5:B5:AE
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C0135326BC46579418A680
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        184.170.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:13:53:26:bc:46:57:94:18:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=5d9faa14-2e87-457b-95ee-77e2c42ac0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:2d:b9:0f:1e:87:66:33:81:e2:43:ae:da:
                    54:cc:34:e8:28:cb:df:b0:b0:b1:f1:17:9b:c3:c1:
                    bc:55:7f:cc:4d:f2:be:5b:93:f8:2d:6f:21:e2:b0:
                    61:c1:fd:1d:13:9e:2a:9f:c7:a2:be:8a:31:a7:91:
                    da:e5:a6:f5:ff:bc:fd:cd:58:c5:44:61:c3:54:df:
                    66:21:0e:3f:40:40:c6:65:cc:e3:0a:79:06:4c:53:
                    c4:70:ee:e8:6a:15:07:79:1f:5a:fb:b5:77:e5:21:
                    5f:dc:2d:c1:4c:b4:db:9e:0e:14:9d:57:c4:7c:f3:
                    e8:a7:15:2d:ec:7f:71:74:3d:10:ee:70:8e:81:9a:
                    b3:7d:61:9c:d7:1b:2c:9f:59:46:19:c4:c6:61:87:
                    b1:cc:e6:77:c9:44:7b:13:1a:76:20:fb:99:ea:ba:
                    70:10:95:42:c8:e9:56:b1:ec:64:9f:40:a6:af:2b:
                    b3:ea:27:4d:e7:c8:41:f2:46:ac:ee:20:3c:49:0b:
                    b2:53:f5:40:3d:61:aa:b3:4b:7a:01:ee:bb:93:3b:
                    30:01:73:c3:45:0b:2c:c3:97:59:8f:5c:a6:19:3b:
                    85:d7:73:83:99:de:02:f0:a9:2e:69:8c:76:83:eb:
                    c6:15:94:4b:e0:b4:a2:d5:7e:16:bc:09:65:03:6a:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:35:73:3F:36:60:18:0C:F1:95:A6:BC:D7:E5:92:E6:D5:B5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:99:97:c5:64:83:33:ac:4d:f7:e2:ea:16:3e:f6:d3:55:
         8c:6e:27:13:ab:cc:23:98:b8:de:c1:63:2a:90:d7:c4:6c:b0:
         be:f5:9b:5f:e5:f9:93:dc:93:2b:21:ca:43:81:4f:99:20:ab:
         85:23:f2:2c:ad:e4:97:70:bb:89:9a:30:2c:e1:5e:a8:8b:6e:
         0d:bc:01:40:14:20:a0:4e:37:8b:cf:c6:5b:f0:76:2d:90:5b:
         2e:50:25:cd:f9:48:3f:a0:e0:3d:19:59:7d:7c:92:e9:9c:95:
         70:db:43:2c:29:c6:e8:e8:5a:ce:5c:66:26:8c:78:e4:63:0e:
         26:87:73:4e:a3:35:9b:f1:8b:5a:05:21:7a:8e:3a:25:93:6a:
         06:2e:ea:5d:3c:62:48:59:27:77:f4:e3:7d:2c:89:22:91:a8:
         4a:64:12:14:76:b1:0e:2e:73:d8:53:89:ce:99:74:70:5a:86:
         02:7b:1b:87:9e:8d:ec:8e:3e:75:06:a7:2e:e6:d4:f8:5e:bc:
         95:b8:4d:e9:6b:70:cc:7b:cd:26:54:08:1a:b0:08:13:0c:6a:
         91:0e:c0:34:70:75:b2:38:6b:54:bd:c3:50:ba:56:44:7f:71:
         b6:38:52:26:29:06:a2:26:ba:22:b4:ff:60:2c:00:29:69:10:
         34:7d:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:30:44 2025 by rpki-client