Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/bcca3dbb-6ed8-3769-901e-cf2a5df570ed.roa
File:                     bcca3dbb-6ed8-3769-901e-cf2a5df570ed.roa (raw, json)
Hash identifier:          /MSkfcUFQ1MaRoEDN2p6e3og8vEJTiEd6r9Cz5x5BNU=
Subject key identifier:   56:60:F8:C4:38:07:95:0E:7B:C3:56:4C:A5:4C:A5:FA:B1:B9:38:87
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A46A5AA8445A18C01793F4C00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/bcca3dbb-6ed8-3769-901e-cf2a5df570ed.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     262287
IP address blocks:        198.145.75.0/24 maxlen: 24
                          198.145.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:aa:84:45:a1:8c:01:79:3f:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=7a864283-912b-48a2-80c8-9590da576feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:18:04:07:95:64:6b:78:3b:dc:a8:da:02:
                    d2:5c:07:cf:59:19:14:42:d8:cf:f7:a0:bb:9c:e2:
                    36:e8:25:60:28:54:36:77:51:9f:21:cf:6a:a7:42:
                    51:e4:5a:44:79:f5:70:04:df:f3:24:de:c9:f3:21:
                    90:c0:d9:b3:ce:86:db:bc:ee:95:9f:69:ee:9e:ac:
                    0a:7c:0a:cf:91:01:58:84:ad:af:71:bd:bd:47:30:
                    7b:1d:73:6f:e5:c3:8a:00:cc:96:7f:40:f9:01:f4:
                    7e:bb:9b:8f:cb:cf:9a:8d:be:7f:96:67:2d:ef:eb:
                    23:56:4b:41:a5:8f:a6:82:5c:04:b6:b8:31:84:f8:
                    ec:2b:88:25:6e:5f:88:cc:1b:9b:26:ef:da:3d:f1:
                    87:07:7f:cb:4d:94:80:88:14:fc:f7:44:40:fa:9b:
                    93:5c:76:e7:7a:5e:0a:39:86:78:43:b8:a3:6b:5e:
                    f7:d8:81:0d:5b:23:f7:51:62:b4:19:e7:72:38:18:
                    aa:75:e8:d3:e0:24:d4:91:36:39:b3:b6:f3:54:39:
                    cd:96:9b:a0:4b:de:cf:d3:0e:18:fe:98:f9:c0:99:
                    f6:2d:4c:e8:95:f3:95:27:e1:47:de:b0:08:cb:e0:
                    3a:8a:84:76:c7:97:7b:37:16:4f:de:8b:8f:51:13:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:60:F8:C4:38:07:95:0E:7B:C3:56:4C:A5:4C:A5:FA:B1:B9:38:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/bcca3dbb-6ed8-3769-901e-cf2a5df570ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.75.0/24
                  198.145.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:92:c4:4c:2c:84:4b:9d:f4:42:91:b2:a1:d6:67:ef:d2:
         1a:c0:49:2b:42:5d:5f:5e:ed:ba:ff:50:52:cb:3c:ce:af:99:
         34:1a:c3:08:3c:fd:ec:b7:15:59:5e:5a:da:5b:5e:ff:f1:83:
         8d:16:1f:b2:b3:61:f0:9e:7c:06:07:ac:fc:44:1e:78:9e:18:
         c5:bd:fd:cf:7f:bf:53:17:21:7e:24:7c:92:a7:89:4f:90:3f:
         e3:a2:c3:5f:14:a3:ab:d4:96:06:0a:96:88:14:27:93:10:1c:
         84:51:b5:28:05:47:1c:b1:62:33:52:17:25:50:f6:d9:3d:96:
         62:09:1f:2a:8a:13:1b:c9:4e:29:65:96:c8:b5:ba:74:5f:6f:
         97:85:3d:0e:d7:b2:af:1b:68:a6:14:00:cb:7e:86:75:8d:d2:
         f4:f3:eb:3f:af:9e:7e:0d:e7:b0:87:8e:fc:cd:e9:4c:3a:d7:
         8f:eb:cc:68:3e:e5:60:b0:93:ca:af:b9:87:19:ce:39:90:ff:
         06:02:85:af:73:d8:94:94:86:4f:d8:a0:2e:e5:0f:31:c4:ca:
         bf:e9:98:f5:ee:9f:00:d8:a2:05:c5:12:af:f8:89:80:72:be:
         67:5c:95:7e:3a:46:bd:36:c4:48:5f:9d:72:33:ed:01:d5:43:
         83:19:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:34 2025 by rpki-client