Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
File:                     03fb9d59-f422-365b-8c92-7177fbbec8bf.roa (raw, json)
Hash identifier:          5jQtKG0GOvPPSWNki/MzcoHiOkmHhix6aCXqQ4acaKE=
Subject key identifier:   4B:B4:C9:17:29:91:9E:63:EA:06:3B:66:64:D5:F0:7B:54:C7:72:59
Certificate issuer:       /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial:       010D0C9F43285849CBCF9E7BB19D16767A5E8D80
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     21700
IP address blocks:        209.151.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9e:7b:b1:9d:16:76:7a:5e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=5e41711b-6153-46b4-a30e-06a6ba993a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:a2:2c:17:02:aa:0f:b7:81:ed:02:90:7d:
                    17:87:e5:ad:36:4b:55:d0:72:51:9a:8d:d4:df:7e:
                    3f:a8:d3:ab:1d:dd:a1:dd:86:14:7b:b0:4a:39:d0:
                    53:e1:76:33:55:9b:d9:7c:d0:61:e1:35:3d:96:26:
                    5d:b1:61:14:a5:2f:07:b5:b0:cd:82:ac:d1:2a:1c:
                    be:61:ab:ff:67:98:88:f1:45:4a:7f:24:7f:90:bd:
                    90:f6:1a:63:e8:2c:2c:e0:1e:1c:da:3d:ec:0f:cc:
                    cc:a2:fc:c8:85:72:55:de:50:a5:dd:31:51:43:3c:
                    1c:1a:b5:15:f1:6a:5c:34:61:1e:85:8b:ef:24:8e:
                    7c:85:b1:f1:4f:2e:2a:66:9a:f8:0e:ac:ce:af:a6:
                    46:1f:c4:ea:22:e7:80:da:13:a0:ed:4f:7f:e5:ca:
                    59:aa:dd:07:85:3c:57:69:3f:b5:cb:21:da:d3:1a:
                    f4:52:14:6f:76:6b:87:52:82:12:8f:ef:cd:ee:3a:
                    f8:60:c0:49:90:7a:a1:ff:7c:59:93:2b:ea:b5:bb:
                    47:39:64:e2:b5:22:c1:1f:ee:9b:8e:ef:86:ee:16:
                    5c:e8:92:97:7c:0e:32:a3:6f:ae:48:5b:76:fb:63:
                    f0:ae:79:c9:54:76:9e:64:06:18:29:96:68:43:25:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B4:C9:17:29:91:9E:63:EA:06:3B:66:64:D5:F0:7B:54:C7:72:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:89:97:e8:0d:bb:24:49:59:63:8e:9f:6d:24:b9:e5:b6:f8:
         e1:e7:75:93:c0:ae:12:7a:5f:ea:b4:2c:cd:68:3f:31:58:af:
         e0:2c:28:73:a4:7b:f8:e4:1c:30:07:07:39:5a:4e:5a:8c:f5:
         51:ac:cf:e8:6e:db:ac:86:07:40:f9:f7:9d:06:52:de:e6:df:
         52:b9:a4:f7:89:60:86:35:f1:d8:1e:9a:98:3b:ce:5a:c3:b7:
         a6:c6:29:dd:f4:28:0d:bb:ac:c0:40:6e:29:f9:55:79:9e:a0:
         55:f3:4b:b5:75:06:3f:af:be:82:e3:fa:32:f8:07:3a:90:c1:
         18:83:75:56:52:a9:96:02:a5:37:d1:42:b5:88:0a:ae:f6:30:
         90:87:a3:c6:0a:16:f2:8c:29:b2:28:a7:56:17:d4:92:cd:3b:
         8c:b4:55:c8:8a:05:8d:8b:a7:dd:19:91:7d:9c:9e:9e:f0:eb:
         18:2a:8d:89:08:36:7d:94:97:45:90:94:e8:8a:72:dc:64:a0:
         82:3e:6a:d9:58:cd:c1:dc:62:f5:50:d2:d2:56:f4:f6:9a:12:
         9d:1b:42:f0:d8:83:ae:ab:da:03:f8:58:f0:2e:6d:1e:a5:64:
         de:6c:b0:3f:e1:21:07:78:73:3d:58:73:41:c9:e4:d6:b3:95:
         1e:54:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:19:15 2025 by rpki-client