Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa
File:                     854cc417-9964-39fb-bc3c-89da106824ca.roa (raw, json)
Hash identifier:          ikaUgVyeFM150P3q6s39IIQgZSOvx+Sj8xu8J2iqqK8=
Subject key identifier:   5A:5B:82:3E:A8:4D:AB:F9:40:1E:6C:62:E8:9F:07:20:33:3A:CD:13
Certificate issuer:       /CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Certificate serial:       010D0C9F4328584A74B5D641111CD746100A62A0
Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     21777
IP address blocks:        199.33.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d6:41:11:1c:d7:46:10:0a:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=39b3acdd-f0bc-4028-bfd6-f39c3383117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:72:f2:50:3e:85:fd:77:d4:ed:99:10:cd:
                    a2:0b:9a:e0:c4:ca:34:90:cf:81:2f:a1:54:18:d5:
                    04:d8:61:75:13:8a:0a:21:4b:72:2b:d0:f9:1a:da:
                    56:45:49:f4:71:20:4b:49:80:56:6e:fb:0f:55:e2:
                    60:28:1d:68:df:e7:af:89:d6:62:ac:f2:ac:47:6a:
                    07:db:d7:84:86:48:39:b6:4e:69:c5:7f:7c:3f:36:
                    33:9c:3f:e4:e2:85:06:a4:83:e8:11:2c:bd:ce:8a:
                    53:d3:40:83:1f:e0:dd:66:e9:59:0c:28:df:aa:aa:
                    4a:de:54:06:f9:8e:b6:56:c9:a5:e2:6f:23:41:b1:
                    f1:ed:2a:1e:ec:43:8e:8c:a7:b4:df:25:47:36:40:
                    10:a3:16:09:26:83:54:95:95:e0:b6:92:68:a6:3b:
                    c7:72:f8:65:ef:45:92:32:6d:e3:c5:1e:09:19:82:
                    c9:1a:f6:d8:c5:21:ad:64:24:e1:08:4c:fc:82:aa:
                    ed:b7:17:cd:e7:bb:5e:fe:49:77:01:60:e0:22:4f:
                    f9:5d:e0:bb:fc:91:15:e1:02:ff:39:ef:55:21:2b:
                    79:ea:e1:b1:c6:f4:ae:04:a2:34:81:35:46:8c:68:
                    c1:4f:26:b8:c6:47:1f:cb:01:f2:59:8c:17:ca:5f:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5B:82:3E:A8:4D:AB:F9:40:1E:6C:62:E8:9F:07:20:33:3A:CD:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl

            X509v3 Authority Key Identifier:
                keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:97:03:c9:67:07:ed:70:a0:c4:c0:f5:ea:b9:69:ae:f5:
         a2:91:d1:cb:96:b6:2f:ec:64:8d:38:59:a2:16:6c:81:c6:93:
         45:dc:e9:07:61:9c:f1:2f:c6:cd:a9:bc:57:48:2d:0e:07:f0:
         51:1b:4a:de:ca:f0:e9:ff:42:8d:3c:90:4a:7e:3d:58:5c:78:
         2f:d2:83:38:03:ed:27:91:72:69:76:01:56:01:07:2e:54:5d:
         76:78:6c:6c:81:cb:50:32:18:bd:b7:00:a7:0e:8b:f3:5a:62:
         42:9c:61:76:a7:1e:84:29:82:0b:c0:21:9f:46:2a:8b:65:06:
         5e:21:b4:37:a7:cc:8c:76:19:d8:fc:6a:70:be:05:4c:33:ba:
         72:9e:ac:70:f5:eb:50:c0:74:d2:0a:13:43:d3:0f:72:d7:a8:
         eb:80:68:07:3a:90:8a:26:9c:41:a6:1f:e1:01:bb:99:df:3e:
         e5:ef:39:e2:1b:59:28:a7:28:91:04:6b:2d:a0:fe:d5:37:2d:
         da:d0:23:10:d2:45:b3:fc:8c:2b:6e:93:05:7a:e6:cb:c5:de:
         41:70:73:68:43:27:8f:51:e5:a6:37:61:6a:36:2e:cf:8d:ab:
         f2:8b:46:c4:03:85:ac:e7:7e:ca:7f:e4:bf:9c:96:1d:3e:f4:
         7a:07:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:25:45 2025 by rpki-client