Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
File:                     47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa (raw, json)
Hash identifier:          vK6AOJ9dcOTcXzVuCHYMMHfKqnw7O8dXY1ODtOf9KR4=
Subject key identifier:   1D:97:F6:EF:4C:17:65:BE:C0:5D:0A:D9:7B:25:1F:12:00:49:AD:BE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A4275890398BD578B883AE100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     203
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:89:03:98:bd:57:8b:88:3a:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=30bb9073-a054-4fe7-b813-77ac3f2ba15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:ad:9b:d0:d1:2d:99:b7:19:d9:d7:b4:b8:
                    95:10:50:1d:45:a6:1f:1d:41:74:7b:84:76:cb:6c:
                    cd:2a:d6:73:2c:55:f3:98:fc:bd:39:81:f3:61:33:
                    70:a6:93:25:a0:2f:41:9b:44:b6:be:e5:fe:3f:b1:
                    79:c7:03:a4:ad:12:62:ef:c3:3c:a7:41:00:34:a1:
                    66:01:4e:9e:75:d0:5a:cd:ce:7a:96:b9:6b:a6:f3:
                    4e:84:6f:e3:b6:8b:84:64:8e:78:db:12:9f:2e:83:
                    b5:08:be:b2:8c:f8:52:fa:5b:47:40:73:12:f8:57:
                    5f:d9:2c:6c:16:78:5a:96:7f:37:28:ac:19:60:f1:
                    05:0e:68:6e:01:da:4a:02:92:6f:a3:5a:12:64:f9:
                    17:07:1b:d2:80:bf:18:4d:da:98:25:1e:74:ab:30:
                    35:49:e3:a0:2e:4d:f1:b9:2c:d9:57:10:00:df:84:
                    88:c9:ae:a3:17:f0:bd:53:92:51:f4:fe:01:e2:54:
                    65:80:77:b7:67:c6:8f:2f:67:6b:84:26:02:a8:f3:
                    1d:98:bf:1b:af:e2:a6:6d:65:cc:21:5a:53:84:73:
                    3a:7e:8b:58:0e:f5:0a:e2:e0:a7:8d:3e:2a:22:eb:
                    75:33:bc:70:56:e5:f1:a2:f5:86:86:cb:e0:d3:7d:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:97:F6:EF:4C:17:65:BE:C0:5D:0A:D9:7B:25:1F:12:00:49:AD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:68:a9:b3:d0:d2:00:f4:0b:d8:4d:1d:58:e9:16:8b:4d:
         32:7a:66:b1:63:01:aa:5f:91:43:f8:5c:9b:9a:ec:07:af:b1:
         34:bf:f8:9b:e2:0b:9d:18:56:73:89:5d:41:b8:ee:6a:71:27:
         9a:7c:89:16:28:0b:d0:bb:63:7f:a8:b7:3d:56:9d:d0:6a:06:
         47:a5:d9:88:d2:ca:64:19:d0:e6:dc:8e:67:a3:4c:f1:d6:43:
         98:6a:72:49:89:4c:49:f3:c0:a7:8a:0b:99:ca:98:bb:f6:c5:
         57:3b:5d:e9:c4:ea:90:57:d3:7b:d5:33:1c:76:d1:d7:ba:b8:
         1d:f6:d4:fc:bc:66:17:5f:11:30:d9:bc:65:13:35:02:eb:10:
         f3:60:fd:0d:65:cb:24:9c:ed:69:19:40:7e:41:f0:8a:22:ac:
         77:62:84:af:1a:84:34:b4:60:b7:dd:89:37:a3:7e:d6:84:65:
         fb:27:96:2d:4d:6f:12:4b:a3:17:fd:cb:ee:d3:a6:f8:da:0c:
         99:63:8c:ad:6b:bb:15:86:99:77:15:50:3d:4b:08:ec:bc:89:
         a9:df:38:04:b9:07:83:14:d5:0a:59:e7:c5:2f:85:06:50:54:
         5d:63:fa:d6:6e:96:65:cd:03:a2:e5:be:82:10:f2:b1:4f:85:
         d6:99:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:26:58 2025 by rpki-client