Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
File:                     9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa (raw, json)
Hash identifier:          VGbQGRlvoSzkF9vQAImEOXHcsYFNnkSZlq319Uz42HI=
Subject key identifier:   BE:C0:44:BF:56:20:C5:DE:89:A5:64:E5:0E:80:74:2D:7D:69:76:84
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584A497066C778EF4D3C9DCB9A00
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     46841
IP address blocks:        199.87.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:66:c7:78:ef:4d:3c:9d:cb:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=6f7eb93c-e9f7-4112-8974-8d602450b771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:9f:b8:24:1f:f7:0c:aa:d2:b7:df:5d:97:
                    c4:1f:e0:53:a6:ff:50:37:65:93:e6:67:af:6c:85:
                    ea:9d:52:13:93:a6:86:58:a3:52:88:d7:c6:3a:89:
                    52:d3:e5:57:36:66:d6:96:2d:b4:3c:77:87:5f:e3:
                    65:c0:91:07:43:42:f0:90:82:3e:03:9c:81:2d:b2:
                    83:53:26:ae:4f:0a:9e:f4:a9:de:2d:f7:ff:75:68:
                    8e:c6:64:8a:1f:f1:8b:a0:8c:58:ba:e2:9f:bc:71:
                    8a:f0:9b:8c:1c:4e:5e:40:61:04:9e:7e:0a:7c:90:
                    fa:d0:ea:b7:bd:8d:65:c4:d9:7f:40:7d:77:c7:e6:
                    70:5c:d2:76:d4:bb:10:11:4d:f0:35:a3:5f:0d:71:
                    ba:3c:c5:e5:6a:b0:74:5a:12:84:af:b4:49:d9:e5:
                    c4:07:20:76:c2:8b:a6:09:96:8f:29:ef:ad:7b:a1:
                    47:be:c2:b6:47:d3:ca:76:aa:5f:c1:e3:79:c0:02:
                    67:56:ef:68:19:28:31:25:a5:4f:4e:c5:91:67:8c:
                    28:03:c0:1a:df:70:94:3c:90:97:5a:fa:70:77:5b:
                    91:8d:51:41:64:db:0e:6e:23:88:4d:39:c1:2e:d1:
                    a4:88:2d:4e:81:27:15:4a:78:d4:db:d9:b0:45:2e:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:44:BF:56:20:C5:DE:89:A5:64:E5:0E:80:74:2D:7D:69:76:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:de:b6:10:b5:6c:94:85:4f:29:e7:d7:be:01:b1:6a:14:28:
         d2:38:ea:33:83:69:bd:7e:17:ba:fa:86:10:2a:8b:ac:40:38:
         2d:c8:35:f0:69:6f:4d:a4:95:28:f9:45:cb:fd:ae:c3:84:0e:
         ef:7b:39:df:39:9d:79:cb:81:7e:c1:8c:1f:2e:d7:5d:5d:f7:
         43:e7:49:fa:92:d6:32:4d:de:cc:4c:88:cc:1c:ae:ca:c5:fd:
         04:9a:e0:3f:bd:8b:0c:12:4b:05:8f:f9:8d:e5:55:1d:18:2a:
         98:71:dc:f7:21:5b:5a:d4:90:89:14:50:42:48:80:42:8c:59:
         65:01:04:6f:00:3b:14:74:d8:f5:bb:8b:48:eb:9a:f0:08:0f:
         71:3d:37:3f:f5:08:43:a1:30:df:7d:29:65:96:ec:e7:c1:17:
         95:4b:9f:cf:4f:02:45:c1:06:0f:c3:07:44:e6:5b:9c:cd:51:
         93:19:34:d1:8b:f8:e7:4f:ea:d7:4d:77:dc:8b:b7:cb:eb:a6:
         f8:71:e8:e0:93:ff:53:66:b8:a4:24:ff:81:28:d5:99:c8:43:
         1d:98:a8:e3:e3:b4:df:6e:b1:df:8e:99:1d:36:4e:83:da:88:
         21:58:af:5e:d2:65:9b:d7:82:67:68:e9:f0:67:fb:55:db:69:
         d0:0f:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:44:49 2025 by rpki-client