Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
File:                     9b2a0da3-5551-3cef-ab65-d40999076b92.roa (raw, json)
Hash identifier:          eOQ0GJeqXKOJiOlW2CxRIgWY3qms0Gck6QFxUDP+Dtg=
Subject key identifier:   E0:CD:95:D3:51:80:A3:29:EC:69:E0:46:E7:55:88:61:9A:AC:86:D1
Certificate issuer:       /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
Certificate serial:       010D0C9F4328584A3E45A907009663BADBB75040
Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     63351
IP address blocks:        207.90.254.0/23 maxlen: 24
                          2606:3180::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a9:07:00:96:63:ba:db:b7:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=63a6a3e9-b119-4df4-b3c0-d59a33a2fd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:6f:15:71:be:d1:3b:49:3a:2b:94:ba:05:
                    0d:2a:68:50:4d:a8:29:28:b3:54:42:c7:f7:9e:2f:
                    19:fb:6e:9d:82:bd:62:c6:c1:7c:ed:89:2f:fd:6d:
                    29:ce:ee:10:54:db:da:47:e2:b5:42:2c:5a:d8:2a:
                    d6:0b:b3:b7:04:92:ce:53:be:8f:4c:39:a2:3b:ec:
                    89:c0:47:9a:16:16:62:c2:01:d9:78:fb:66:c3:df:
                    87:35:bd:02:4c:5b:c5:7a:3d:7f:db:d6:ef:43:15:
                    d1:69:93:9d:d6:fd:4b:e6:c3:4c:bf:95:e7:f4:5f:
                    4b:e5:e1:9d:4b:0f:92:93:9f:02:08:86:a9:d4:11:
                    36:bd:de:fb:43:cb:77:8e:a2:64:f6:f2:c1:6b:93:
                    a3:c1:d3:49:b6:56:c7:15:2d:26:af:9c:44:cf:e0:
                    c8:94:3b:b7:6a:3d:83:c2:91:f7:c5:fb:5d:08:ab:
                    60:1d:65:cc:84:ed:53:08:99:8a:b0:8c:80:5d:c4:
                    41:d6:bc:6c:4b:97:7f:a2:96:34:21:9e:05:3a:b8:
                    0b:d6:09:7e:ea:22:cb:c4:77:66:54:e5:db:aa:80:
                    a3:c7:15:d0:06:40:fc:43:bb:6f:e8:b4:e6:bf:20:
                    99:c4:4a:a2:b5:76:4b:e8:ed:3c:d9:32:b2:ef:90:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:95:D3:51:80:A3:29:EC:69:E0:46:E7:55:88:61:9A:AC:86:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl

            X509v3 Authority Key Identifier:
                keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.254.0/23
                IPv6:
                  2606:3180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:06:ca:7b:bf:52:98:d0:4f:25:ce:93:d3:77:76:4a:a7:4b:
         b7:07:ec:69:8d:df:88:df:73:53:af:b1:2d:16:70:34:bf:e9:
         b1:a6:8c:9a:93:ae:29:4e:74:17:f7:5b:af:f4:c4:f6:9e:5b:
         03:5f:95:5f:37:ee:9e:22:53:d0:4f:08:36:db:de:10:11:09:
         78:ac:70:c0:1e:4d:16:9a:db:f4:0e:64:67:4d:25:8b:b4:b6:
         2b:19:5f:10:82:f9:0b:22:d0:09:21:f7:ea:66:47:d3:91:12:
         c0:f8:36:f8:f1:4f:f0:6f:a3:22:20:bd:c6:41:67:df:59:9e:
         a6:40:d7:0d:66:7d:bf:e8:46:95:6a:87:98:49:aa:42:46:08:
         cc:eb:6e:14:3b:ca:8d:41:18:8f:9e:66:e1:45:c8:fa:0f:fa:
         fd:57:61:9e:fb:b4:6f:70:77:1d:bc:e5:2e:74:c5:9c:34:96:
         2c:8d:2f:6e:3e:f7:49:5d:ac:46:ab:67:f8:00:dc:ac:1b:99:
         a7:6f:a3:47:1c:01:9b:13:73:a0:14:11:fc:38:11:29:e9:15:
         af:a7:84:58:79:f6:bc:a2:8c:7e:39:cb:86:a4:21:70:9a:50:
         f6:9f:66:ac:d1:2e:c2:44:ed:fc:37:ac:50:21:2f:9c:ba:81:
         11:61:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:50:23 2025 by rpki-client