Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa
File:                     ab1397b5-747c-31d8-926d-e9533d7dc81a.roa (raw, json)
Hash identifier:          U0kVRSB22bfxrnIRMSx4RH0m/rPuM9VPwvFFdB7KmHk=
Subject key identifier:   18:9F:FA:CF:F6:FC:70:83:C6:19:6B:30:2A:4D:D7:29:78:AE:CF:72
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F4328584A41104785E48DB5FDA557D8C0
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     8796
IP address blocks:        199.30.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:47:85:e4:8d:b5:fd:a5:57:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=34025ad7-a6c8-4e3d-bc68-56d9c5468988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:6b:a0:3c:ff:9f:be:51:78:62:65:22:26:
                    14:41:cf:6d:16:90:00:4e:bd:28:50:d9:f6:d4:0e:
                    e5:aa:6a:2f:df:c6:12:32:e3:92:c2:3e:e5:27:d4:
                    66:a1:6f:6d:84:2a:d0:a5:38:73:2e:d8:25:a2:b6:
                    4e:c5:bb:87:4f:54:2d:ce:89:2f:5b:21:f7:78:7b:
                    9d:02:44:f6:3f:22:48:69:11:99:f4:41:51:b4:16:
                    e2:9f:a5:a6:51:37:ec:0b:1d:5c:6f:b9:b8:a3:20:
                    d3:84:0e:4d:2b:57:98:23:96:9b:71:27:8b:af:9c:
                    ec:b8:e2:37:ba:8d:d1:87:a4:76:87:4d:42:f1:b1:
                    ce:4c:76:ad:69:2e:8c:14:8d:38:a6:15:02:aa:0a:
                    84:59:fd:8d:7c:e9:a6:30:70:a4:1f:e4:31:02:30:
                    7d:3f:42:c4:cb:5e:55:0b:01:da:15:67:09:2c:a4:
                    a5:f8:f4:9b:7d:68:67:a8:4d:04:e7:b6:9b:46:31:
                    ef:e0:3e:93:46:3a:94:87:ee:e2:53:a9:a6:58:91:
                    5c:87:56:75:80:27:db:fc:99:9f:17:03:8b:d7:24:
                    e9:79:01:87:0e:8f:f3:6c:01:2a:bc:ea:88:3c:24:
                    d8:17:c3:2b:be:f6:ac:37:0e:e2:79:cb:3c:45:2a:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:FA:CF:F6:FC:70:83:C6:19:6B:30:2A:4D:D7:29:78:AE:CF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:d8:6a:8c:4a:a4:bb:5e:cb:e4:5e:29:e4:cc:9b:e7:b1:
         79:10:c0:08:2f:2a:64:e7:4e:eb:3f:be:c1:8c:37:10:2e:c1:
         3f:41:c7:fd:cf:9e:59:46:d3:22:02:27:62:4c:3e:25:14:45:
         23:bd:b0:bb:a9:6f:ab:e7:be:c7:9a:e3:7e:23:36:07:be:b6:
         19:a1:22:c6:4a:02:ea:d7:9b:78:70:f4:e0:41:b8:e5:03:f3:
         d1:5b:18:fd:f7:1f:9f:d1:09:10:77:cf:ee:4b:d7:d7:7b:90:
         07:fb:37:06:48:15:7d:49:fd:d8:68:31:8b:81:d5:bd:c0:7f:
         4b:4d:82:79:35:00:be:c5:e1:07:a1:ae:29:da:4e:6f:15:0f:
         ad:52:50:b9:23:66:09:82:52:1a:34:33:c7:a8:6d:12:24:bb:
         3a:f5:a6:36:d8:4c:ce:a7:51:6e:ea:af:19:40:1b:42:b6:61:
         ed:eb:42:3d:fc:ff:07:96:b4:ef:3c:a4:c5:8a:93:80:da:31:
         cc:33:99:b2:db:15:5f:61:5c:c6:de:b8:d6:56:ad:22:8a:f2:
         52:d1:61:c1:1c:73:f1:f3:40:ca:c7:61:e8:96:a9:c8:c6:e7:
         79:3a:64:09:68:b4:a5:ef:a3:63:a0:70:08:ac:9d:49:f8:3d:
         b7:90:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:59:07 2025 by rpki-client