Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
File:                     63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa (raw, json)
Hash identifier:          +e6O/m3hBaSf/m+59NGROOJEm3SrxwyVWVSQW7VOhnQ=
Subject key identifier:   6D:3D:48:9F:8C:A4:68:32:35:D9:9A:9B:3A:83:56:97:BE:A3:FF:1C
Certificate issuer:       /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial:       010D0C9F4328584B382194A9483F09F16518F4C0
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     19935
IP address blocks:        159.112.233.0/24 maxlen: 24
                          173.224.240.0/20 maxlen: 20
                          173.224.240.0/24 maxlen: 24
                          173.224.241.0/24 maxlen: 24
                          173.224.242.0/24 maxlen: 24
                          173.224.243.0/24 maxlen: 24
                          173.224.244.0/24 maxlen: 24
                          173.224.245.0/24 maxlen: 24
                          173.224.246.0/24 maxlen: 24
                          173.224.247.0/24 maxlen: 24
                          173.224.248.0/24 maxlen: 24
                          173.224.249.0/24 maxlen: 24
                          173.224.250.0/24 maxlen: 24
                          173.224.251.0/24 maxlen: 24
                          173.224.252.0/24 maxlen: 24
                          173.224.253.0/24 maxlen: 24
                          173.224.254.0/24 maxlen: 24
                          173.224.255.0/24 maxlen: 24
                          205.178.191.0/24 maxlen: 24
                          208.52.144.0/24 maxlen: 24
                          208.103.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:94:a9:48:3f:09:f1:65:18:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=9f515441-c4ed-4339-9622-9f2108a7a2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:67:1c:96:7f:3c:eb:77:23:de:2d:96:69:
                    37:d9:b0:11:6d:d2:4d:5c:a7:78:2d:fe:2c:f9:44:
                    08:cd:96:e2:4f:9f:cd:a0:4d:30:cc:bd:06:c8:93:
                    39:1d:83:66:bc:59:fe:ce:b7:6e:66:3d:47:d1:de:
                    bd:ba:93:0b:46:53:c5:ff:99:5a:75:44:73:c6:c5:
                    6c:f8:b4:5c:fe:47:2e:f4:5a:eb:b9:30:05:8f:5b:
                    62:d7:bf:4d:17:65:75:21:eb:01:7c:c6:03:c1:fe:
                    98:24:64:1d:cf:26:4e:39:e4:1a:97:6a:a4:89:52:
                    5e:cb:33:de:85:07:81:6b:b3:ae:2d:7d:20:32:a8:
                    eb:ff:1e:dd:4b:99:e5:9c:89:38:47:20:57:8b:29:
                    b3:80:4e:af:93:04:5f:b8:f4:a9:7f:82:8b:aa:12:
                    60:e4:35:0b:b7:df:1e:7f:bf:d3:65:be:2c:1d:de:
                    39:23:a1:b4:97:b2:0b:c7:5f:41:6c:2f:12:7c:97:
                    66:30:b0:31:6a:b8:d7:02:cb:1d:7e:c6:7f:69:fa:
                    6a:f9:d5:35:e9:b7:a2:3c:03:51:5d:cf:ac:0f:96:
                    dc:c4:c0:7d:21:e5:ae:cf:97:88:2e:e2:4f:ac:a5:
                    43:85:b6:c5:6d:7d:51:62:79:c6:83:4b:65:1a:82:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:48:9F:8C:A4:68:32:35:D9:9A:9B:3A:83:56:97:BE:A3:FF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl

            X509v3 Authority Key Identifier:
                keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.233.0/24
                  173.224.240.0/20
                  205.178.191.0/24
                  208.52.144.0/24
                  208.103.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:1d:d5:d6:47:3d:a0:fe:5c:83:99:73:28:3f:d7:2a:49:
         6d:8e:6e:5c:5e:a9:f4:6d:4d:b5:fe:d2:a5:42:90:59:58:6e:
         8f:07:9e:66:3f:12:06:22:a6:cc:3a:17:38:a6:c2:38:de:86:
         c8:54:ed:77:47:5b:aa:35:66:13:b3:e6:5e:f4:51:ad:09:76:
         5e:bd:05:a6:0e:ad:74:b4:9e:bf:6f:7d:29:aa:34:b0:74:f1:
         cc:b7:74:4e:f9:13:3c:5e:24:3d:39:bb:4d:62:18:b1:32:1a:
         17:d1:39:b4:6d:a7:b4:3a:61:c2:10:28:5f:32:1f:4d:f8:39:
         a1:70:24:56:fa:bb:7d:34:76:e5:05:8d:44:30:21:db:ff:dd:
         dc:69:14:ab:c1:db:03:2a:81:31:3c:6b:1b:e1:03:9f:98:39:
         65:73:46:b2:a7:0a:21:8f:80:90:db:f4:08:2f:29:22:03:91:
         c0:6c:0f:58:a0:ad:31:2b:c2:1b:fe:63:e3:c0:51:95:20:35:
         ea:36:bc:5e:f7:6b:7d:3f:89:e7:af:30:59:24:52:6b:f6:fa:
         44:d3:16:4c:c8:f2:ed:5a:e5:4e:26:00:6e:59:92:4d:cc:ca:
         3e:15:70:95:99:11:a3:33:af:a3:c6:ab:08:aa:d1:7d:90:6f:
         46:5e:79:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:06 2025 by rpki-client