Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa
File:                     5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa (raw, json)
Hash identifier:          jDMgL3YI9I7CR334UhUI6KPYvp+OtvZ5+eEjlonk/34=
Subject key identifier:   E7:A8:1B:C8:BE:FB:1B:82:F8:1F:EC:29:64:32:45:D4:3B:DF:A2:59
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6825FFF24BB126C58228C480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     33549
IP address blocks:        204.191.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:ff:f2:4b:b1:26:c5:82:28:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=6984f43b-f59a-4e7a-b8d6-f3859ee191f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:d5:5e:20:bf:ee:d1:f3:31:fc:3c:62:8c:
                    6a:a8:c4:47:b7:2f:be:43:7a:ef:c0:2e:07:bc:e8:
                    6c:a9:db:19:4f:c8:29:db:c7:25:c7:a7:73:37:37:
                    19:7f:e4:e8:b3:90:73:97:00:c0:e6:ac:23:10:9f:
                    22:50:17:4f:e7:2a:59:4c:59:3f:bd:a3:2b:07:e0:
                    c6:3f:10:1f:77:c2:9e:81:51:1a:76:6d:a6:bc:45:
                    94:68:3c:78:9d:09:60:6f:b1:40:8c:bd:f1:8a:a5:
                    5b:45:38:6f:e1:29:de:6f:b1:c1:8d:86:7f:34:b6:
                    b0:8b:17:c1:14:35:63:23:fc:ec:ec:6a:41:79:f9:
                    25:d8:ab:e8:69:14:9b:76:d7:56:ad:d1:c2:90:51:
                    6e:3f:d3:a3:92:d1:b6:39:13:ab:f4:c6:b3:3f:ad:
                    23:94:fa:f4:3d:d6:1e:af:d5:ce:20:85:e8:c4:06:
                    d4:4c:d0:97:b4:a9:9f:64:ca:77:3f:c2:78:da:43:
                    81:c8:fd:a5:ad:55:d6:3e:1b:f7:76:37:cb:32:3d:
                    63:c4:9e:c8:fd:1a:4f:03:dc:21:ec:3d:b6:7e:6b:
                    32:b8:39:74:1e:01:fe:1c:8e:fa:9a:6d:0e:6a:2b:
                    58:53:70:2b:f2:99:b2:b5:f9:ac:56:d1:1b:9c:7b:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:1B:C8:BE:FB:1B:82:F8:1F:EC:29:64:32:45:D4:3B:DF:A2:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.191.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:06:25:f0:d3:78:03:63:ef:2d:61:3e:59:65:35:32:56:5d:
         f8:d5:d1:9a:a1:c0:85:f7:2b:27:78:d9:54:b5:0c:ef:14:e8:
         f3:b6:3d:eb:04:09:34:93:0a:e8:9c:55:98:00:b7:76:6f:c5:
         a6:e5:ca:27:e2:e0:c8:79:3c:92:05:17:3d:6d:48:87:6f:db:
         e7:95:c7:bb:25:60:99:e5:34:81:ed:e4:64:c2:6d:f7:7f:fb:
         b0:42:23:27:54:a8:c5:ab:5c:69:67:ab:93:d8:58:30:c3:6c:
         db:61:4d:07:c2:87:4b:c2:86:07:f2:80:ed:05:a7:ef:68:ed:
         12:9c:ec:18:b2:89:7b:29:ad:9b:3b:22:96:d2:d2:32:22:cd:
         2e:87:cf:f4:9d:6f:84:a0:76:29:79:b4:56:74:2b:c5:7f:e2:
         ca:72:0b:96:8d:a6:20:c1:ed:e6:26:ae:4f:86:aa:ab:3a:4b:
         35:02:ee:b3:87:56:ad:1b:28:47:5d:92:31:8b:45:70:9c:8a:
         8c:71:fe:f2:6e:3f:6e:77:be:77:e0:bb:01:57:aa:6d:dd:f3:
         ac:aa:b8:2b:14:8d:84:fc:e3:c0:9d:a9:a7:2a:42:ca:17:8e:
         e4:77:5f:3a:1b:68:91:0f:4a:9b:4b:7d:1b:51:f1:94:62:5f:
         f9:46:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:15:06 2025 by rpki-client