Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/c8d6b263-e9a9-35d8-ba4a-259f200fe05f.roa
File:                     c8d6b263-e9a9-35d8-ba4a-259f200fe05f.roa (raw, json)
Hash identifier:          0fKjZQLSafhuKaYpQXoMDoJjSQzPllc/DaVCSUsp1Ig=
Subject key identifier:   DE:FA:0A:CC:45:4D:ED:BA:20:7A:31:44:91:3D:61:DB:12:C4:3B:F7
Certificate issuer:       /CN=df247d2f-5f6f-414c-b8c9-181359f105bf
Certificate serial:       010D0C9F4328584A4540404DF0233F0955CD2740
Authority key identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/c8d6b263-e9a9-35d8-ba4a-259f200fe05f.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     13855
IP address blocks:        209.40.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:40:4d:f0:23:3f:09:55:cd:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df247d2f-5f6f-414c-b8c9-181359f105bf
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=d16baefa-36f2-41e9-9bbe-e931ccc345ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:57:f1:c2:dc:2d:37:09:4a:b2:10:5d:52:
                    77:d0:70:ab:5f:8a:dd:62:2d:98:d6:33:91:13:51:
                    ab:19:72:be:e5:58:68:ec:4d:87:2a:8c:47:62:d9:
                    41:1a:5d:d1:40:97:bd:5a:52:47:03:8a:64:c6:f2:
                    8f:ea:f1:7f:29:c7:f1:51:e6:e0:2e:e6:da:94:a0:
                    f0:3c:e7:18:60:a7:48:4d:77:54:eb:e0:ba:a9:5c:
                    20:70:7f:89:e4:8a:4a:3e:4b:05:3c:22:40:eb:17:
                    6d:ae:03:61:79:e7:cb:0c:a9:fc:fc:e3:62:7d:4e:
                    c1:00:1e:7c:ce:a1:b3:3e:dc:b8:6a:d8:03:dc:3e:
                    ab:da:72:49:d9:7b:f9:e6:fd:ee:d4:61:0b:a7:08:
                    ec:b5:98:2c:c2:60:2e:c6:f6:98:72:c0:ac:34:e5:
                    f9:b9:84:ec:f2:03:e4:d9:7f:27:1e:2f:52:69:65:
                    56:1e:ad:fc:de:a4:f7:9a:47:f4:20:a3:94:80:80:
                    72:59:1d:d8:9c:a0:44:0e:3b:b7:ee:23:e1:a7:2d:
                    c9:4a:35:11:ea:41:b7:87:ee:c6:66:cf:26:3f:85:
                    b3:39:72:a4:b9:71:77:5f:bb:c9:b4:3d:d8:c1:86:
                    01:89:92:c2:b4:44:d6:cf:58:69:37:7b:9e:0a:02:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FA:0A:CC:45:4D:ED:BA:20:7A:31:44:91:3D:61:DB:12:C4:3B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/c8d6b263-e9a9-35d8-ba4a-259f200fe05f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl

            X509v3 Authority Key Identifier:
                keyid:03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.40.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:db:d8:5b:10:06:24:b6:01:51:ad:f1:43:5e:8b:dc:5d:
         a6:2e:ec:5f:28:f5:d0:ff:4d:ab:3e:37:72:4a:db:c8:b5:ec:
         c0:5a:f5:f6:2d:32:65:72:7d:e4:01:3d:51:4c:55:ff:d7:2c:
         86:0f:46:9c:14:b0:63:18:fe:3e:8a:65:89:eb:dc:d5:e9:c3:
         9c:da:bc:12:4b:97:68:c7:02:b1:e1:a6:a4:ce:26:91:ab:8d:
         5c:9b:88:33:98:85:3d:9a:74:e9:70:eb:cf:bc:c0:68:a0:2b:
         3f:67:85:f4:7c:6b:72:52:86:4f:65:42:85:b7:3c:3a:85:88:
         26:c9:e5:2b:f3:b1:75:02:5f:c8:88:98:c7:ff:b6:8d:c4:d6:
         af:65:1c:f9:e4:67:49:bd:95:1e:22:d1:c6:5d:da:fd:f6:e2:
         0c:97:08:11:a3:e8:37:e8:6b:ee:a2:20:00:03:2a:28:b8:a8:
         a8:86:c2:d4:08:e0:fd:a0:01:fd:63:87:e9:3d:13:ca:b4:d8:
         a9:07:1c:d8:41:0f:48:e8:11:d7:a5:e3:f6:9b:4d:22:38:eb:
         3b:79:c3:61:c7:31:bc:ba:02:60:b4:81:00:59:95:76:08:79:
         65:ba:55:f6:b2:d6:c7:be:fb:67:ea:83:eb:6b:1d:b6:7f:d9:
         12:6e:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:16:53 2025 by rpki-client