Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa
File:                     bf08937d-404b-366f-bdcd-82a7cd5e0545.roa (raw, json)
Hash identifier:          PiM+tEpeGyCMus0ftN/zThwWTBdEbUT9gCa5RqRk6C0=
Subject key identifier:   D5:C7:54:9F:F4:EF:2D:3C:86:A1:E7:E7:15:76:BF:33:9E:04:B9:2A
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F4328584AC2E0D87C19F86C6C730825C0
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11281
IP address blocks:        204.9.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d8:7c:19:f8:6c:6c:73:08:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=60999469-f050-4dc1-a335-b88c6f43f2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:c7:37:0c:93:ef:66:c1:f8:5f:de:b2:1d:
                    fe:3a:2c:5e:dc:2a:53:78:99:b6:e7:ba:49:80:28:
                    97:47:3b:d6:96:86:ee:e4:34:0c:1d:33:9a:86:71:
                    fa:24:80:47:bd:a5:64:6a:5f:5a:48:8e:c3:78:dd:
                    c2:da:88:9d:39:af:47:12:16:21:5e:db:56:a6:ee:
                    84:b2:01:37:22:84:b4:01:96:0d:8c:d6:3d:17:e2:
                    5c:a6:c7:26:8f:32:b8:a4:46:bc:1f:18:a0:ef:1e:
                    92:ff:77:b4:2a:ff:37:4c:10:f4:61:d5:d3:3a:a9:
                    07:43:7e:7f:18:f3:99:d6:9a:67:9e:6b:93:ea:03:
                    ff:99:70:ed:6e:90:45:2b:73:bf:b6:cc:80:50:da:
                    f7:c5:1e:b5:0a:aa:62:27:af:38:37:01:83:b3:34:
                    b1:d9:56:03:8a:82:3b:c2:ac:88:64:3d:2a:84:8d:
                    bf:de:9d:98:14:22:6c:87:e3:23:11:9f:69:b3:81:
                    81:36:bb:05:b9:af:b9:2a:f1:ca:0d:e6:04:d4:5d:
                    a9:79:39:b5:81:9e:58:fb:88:37:7f:94:2f:14:c9:
                    a6:d0:c8:aa:20:fa:76:53:08:24:3d:be:71:8b:c1:
                    c8:02:b7:da:01:22:00:0d:0b:27:6f:3b:b9:18:07:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C7:54:9F:F4:EF:2D:3C:86:A1:E7:E7:15:76:BF:33:9E:04:B9:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/bf08937d-404b-366f-bdcd-82a7cd5e0545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:73:93:d6:0f:fa:f9:40:80:29:a2:e9:69:b3:4c:73:65:90:
         c9:44:9d:b1:cc:fc:3e:3b:6f:ee:21:9a:4b:b9:a1:47:1c:58:
         5f:75:5b:bf:14:4b:b5:4a:84:9f:e1:db:7d:51:fd:09:36:50:
         a0:e8:23:b4:a2:0d:aa:25:be:41:eb:5b:6a:50:bf:07:3a:2e:
         32:e2:1d:b9:6f:4a:1e:7b:1f:8e:5f:9b:0d:e6:7e:8d:92:ea:
         5c:41:40:44:a2:34:fe:e1:ea:92:78:de:65:5f:f7:05:99:9d:
         8b:b7:73:f0:4d:e3:bc:62:c6:1f:d4:97:90:4f:af:79:9f:fc:
         6f:f5:52:a7:cb:c0:1f:f4:17:94:95:89:3e:9e:04:35:4c:66:
         3a:69:db:09:b4:3c:aa:0e:cf:13:ef:25:56:01:db:18:5d:c8:
         01:36:a4:61:bb:07:68:e5:aa:5f:ac:06:13:ab:52:5c:df:bb:
         ae:0c:b9:d0:8c:7f:38:7f:fb:1b:80:96:ca:01:3b:51:cd:01:
         7e:79:8f:80:ad:4f:88:cb:06:c1:40:13:5e:be:41:24:0f:0d:
         5a:36:62:4f:6d:20:3a:ee:f0:82:01:43:1a:8d:ab:61:6b:74:
         44:d8:f9:ac:24:69:02:4c:44:a4:fc:39:b8:42:94:38:0c:59:
         ea:ec:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:56:54 2025 by rpki-client