Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/554a74ea-99c9-36b3-a494-4d718eb3488c.roa
File:                     554a74ea-99c9-36b3-a494-4d718eb3488c.roa (raw, json)
Hash identifier:          qPKn+9nJ68DiPuvv69ZdF/3Zt3nv3+VYpSfecYaA6tI=
Subject key identifier:   DC:57:9C:6C:07:1B:3C:FB:00:01:20:63:73:1C:AD:DD:B5:78:A2:4B
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A427588E656C44A7260B61580
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/554a74ea-99c9-36b3-a494-4d718eb3488c.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     7018
IP address blocks:        209.142.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:88:e6:56:c4:4a:72:60:b6:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=7327b8fe-10ff-4d34-9f2c-530011eaa5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:d2:8c:8f:a7:c7:72:65:fc:f7:cc:91:c0:
                    aa:04:12:bb:39:d7:d0:bf:b4:cb:79:8d:7e:4d:90:
                    97:e4:10:67:81:71:a9:1b:97:46:b0:b2:98:c8:87:
                    c3:d0:67:c9:66:bf:89:01:b4:39:64:ab:01:4c:dc:
                    c1:07:f2:80:26:42:a2:3f:66:05:e1:77:c5:47:7b:
                    b2:d4:66:7c:62:11:cc:6c:a6:c7:a7:c5:19:43:c3:
                    f7:57:77:a6:7c:4c:b6:06:8b:e6:e6:94:6a:59:f7:
                    f7:bb:f0:1b:4b:cb:ca:79:6e:6c:30:a2:b0:a9:e7:
                    05:cb:a2:92:a2:6e:09:4e:b8:63:62:bc:a0:14:20:
                    bb:ec:19:2b:c2:43:cb:71:78:5e:e2:51:d2:d1:11:
                    a5:e8:bf:21:3c:01:62:ec:6a:73:71:c5:7d:03:54:
                    28:5f:44:ef:56:20:cf:e3:88:b8:73:8a:7b:4c:30:
                    57:cd:8b:4f:6a:da:a6:2d:ca:e0:ba:21:78:8c:a0:
                    3a:06:5b:01:36:19:79:fc:aa:e3:1a:97:1d:9d:7f:
                    98:4f:86:19:c9:17:aa:7c:85:1b:7b:57:79:6c:b0:
                    e1:3d:63:37:11:73:ae:2e:3d:6d:f6:2c:c6:01:cc:
                    4a:3f:b2:db:d2:5f:50:e2:b7:52:0e:ad:da:b6:85:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:9C:6C:07:1B:3C:FB:00:01:20:63:73:1C:AD:DD:B5:78:A2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/554a74ea-99c9-36b3-a494-4d718eb3488c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:98:cc:47:f1:8a:0d:70:0a:02:d6:88:95:de:b2:2b:52:
         14:ce:02:c4:d4:7d:22:9c:5d:d8:c2:67:ee:83:a1:c0:62:87:
         bf:dd:c6:10:44:90:d2:e2:ae:dc:e1:a0:bd:0d:19:9f:fc:15:
         b1:d7:16:45:7f:ae:13:04:ba:7b:62:1b:ad:26:47:23:8a:ed:
         01:70:55:b0:12:b2:c2:ef:a4:b8:94:34:d3:9e:45:81:2b:9c:
         0a:f2:2f:d7:a5:96:f9:f3:72:ec:cd:c0:ff:ae:ce:eb:d5:ba:
         ba:eb:b5:c9:fa:aa:4a:30:87:f6:c6:aa:a4:a5:37:1b:df:a2:
         f9:db:d2:df:87:60:05:10:a8:d1:b5:17:85:e2:5c:65:72:8f:
         68:1e:9d:32:c3:08:92:34:71:4e:05:53:e9:71:70:72:77:a8:
         4a:8d:1e:4d:0c:87:1c:04:e0:d9:5d:8b:2a:37:c5:43:f0:44:
         20:01:21:2e:0e:42:4f:9a:95:e3:4f:6f:92:ff:88:c9:8c:b0:
         55:07:6a:e8:14:a0:99:2d:71:7b:d3:7e:65:d8:b0:ff:93:56:
         99:67:3c:13:fe:e7:35:c9:a3:5a:18:47:a7:a4:c1:95:22:aa:
         a9:95:14:0b:0c:12:73:c2:07:eb:92:1e:d2:35:9e:a5:30:2a:
         3d:39:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:48:06 2025 by rpki-client