Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/fb3230f6-cd03-3618-b6a9-8cd9043fd5b2.roa
File:                     fb3230f6-cd03-3618-b6a9-8cd9043fd5b2.roa (raw, json)
Hash identifier:          RkWKdszU/KtG/fdI8lJnCYjfZYjPnI8VNNtT9p19XhY=
Subject key identifier:   73:B0:50:DD:C5:E5:E0:EB:C5:5E:EF:12:C4:9A:2C:2F:DC:46:92:93
Certificate issuer:       /CN=b5c1b03f-0c18-4c5e-9e0c-8d07ed940807
Certificate serial:       010D0C9F4328584A4C3B12DA569AA9092E7AFA80
Authority key identifier: 1F:38:C4:3C:32:0E:2F:46:43:14:E2:FE:1C:83:57:5B:5A:3D:DF:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/fb3230f6-cd03-3618-b6a9-8cd9043fd5b2.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     32212
IP address blocks:        209.51.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:12:da:56:9a:a9:09:2e:7a:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c1b03f-0c18-4c5e-9e0c-8d07ed940807
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=dddbbd18-a912-4d20-8a68-3a38eed98c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:53:bc:83:3e:7e:a9:0b:e7:56:ef:b1:6d:
                    7e:a4:8d:02:a0:a3:d8:f9:ec:21:be:09:30:fe:c9:
                    a1:29:3e:b7:72:1c:f9:59:c4:75:47:38:b3:32:bc:
                    bb:1b:06:ff:4b:42:8d:1a:2f:e1:95:88:93:bc:64:
                    98:9b:b6:c9:10:fe:e9:47:f1:e0:18:a1:4d:e7:0c:
                    ec:d1:5a:dc:fa:48:9f:b2:d8:86:70:8b:b3:20:9d:
                    5d:9b:b6:99:f7:f2:f4:3f:f9:02:74:dd:43:64:8a:
                    1e:20:f7:07:f4:26:b8:cc:85:ae:49:26:0b:37:8b:
                    52:82:4d:14:70:ae:f0:5d:4b:db:02:f7:a3:d6:be:
                    be:ac:6d:d3:14:87:31:0b:52:7d:d0:32:5d:10:dc:
                    eb:63:f2:77:59:52:c5:b3:cd:07:e8:34:34:99:26:
                    65:35:6e:a1:89:e1:72:2c:04:2f:7e:d0:9a:64:ad:
                    49:bf:80:b0:23:62:4d:14:da:45:4e:10:29:99:1d:
                    98:84:6d:9a:5b:3c:b0:be:94:d3:9f:de:73:25:ba:
                    81:a7:b0:83:d4:13:6b:13:f0:74:50:2f:77:e0:13:
                    39:0b:65:ed:34:6e:2a:0a:88:c3:0a:3b:3e:c0:2a:
                    bd:bb:bd:91:7b:09:0f:0d:04:b9:8b:df:35:0f:8b:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:50:DD:C5:E5:E0:EB:C5:5E:EF:12:C4:9A:2C:2F:DC:46:92:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/fb3230f6-cd03-3618-b6a9-8cd9043fd5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.crl

            X509v3 Authority Key Identifier:
                keyid:1F:38:C4:3C:32:0E:2F:46:43:14:E2:FE:1C:83:57:5B:5A:3D:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:11:7c:55:8b:3e:6e:eb:69:fe:1e:b0:1a:c6:16:1d:68:83:
         71:53:fb:3d:fd:bd:0e:3a:be:83:cf:2b:1c:55:7d:53:00:2b:
         59:e9:8d:d3:05:85:b4:cf:b9:c8:20:da:ea:8d:9d:ff:b6:7b:
         f7:53:f4:30:7a:8a:0b:db:68:f6:6e:35:39:88:d9:b0:c1:0b:
         41:48:9f:af:1f:53:01:4b:c7:dc:dd:a7:64:16:f0:31:e2:79:
         12:b1:5c:6e:78:2f:ce:24:df:44:0b:40:68:8d:3f:06:e8:de:
         eb:7c:8e:70:fb:a8:66:69:03:62:a7:87:e3:33:db:1e:8f:52:
         d5:ba:86:9b:d6:7e:4d:29:b1:d3:db:8d:10:03:b2:13:70:00:
         c8:2a:57:f6:95:be:d0:49:da:62:06:5b:a6:b3:dd:de:84:63:
         22:ef:19:57:7a:cf:39:fd:4f:60:8e:ca:56:64:ea:3f:4e:3e:
         2d:f6:ab:0b:82:c3:26:9a:3d:15:10:da:3d:41:16:28:af:86:
         d9:8a:20:7f:ba:27:48:32:90:8e:89:b9:e5:c4:75:36:20:d2:
         59:3c:af:e0:5f:63:a9:08:2c:b8:b8:4e:43:a8:1f:99:2b:f0:
         ab:e6:df:32:5a:1c:88:f3:16:06:62:bc:ae:22:75:91:22:22:
         f0:9d:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:22:26 2025 by rpki-client