Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
File:                     36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa (raw, json)
Hash identifier:          1KQWxOPDoIDL8woLW1x08grytDhRCIsiL+bs/1ceXL4=
Subject key identifier:   A2:65:3B:DA:DC:87:BD:91:6C:91:A9:E4:9C:78:4E:40:42:AF:BD:76
Certificate issuer:       /CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
Certificate serial:       010D0C9F4328584A2E2DD16D0B3020AB503AF780
Authority key identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
Signing time:             Fri 13 Jun 2025 18:40:16 +0000
ROA not before:           Fri 13 Jun 2025 18:40:16 +0000
ROA not after:            Thu 11 Sep 2025 18:40:16 +0000
asID:                     210
IP address blocks:        134.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:2d:d1:6d:0b:30:20:ab:50:3a:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
        Validity
            Not Before: Jun 13 18:40:16 2025 GMT
            Not After : Sep 11 18:40:16 2025 GMT
        Subject: CN=8844eabc-f297-4b26-962b-4acae5e3a1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:6e:b2:df:a0:48:42:2d:d2:06:54:16:6a:
                    46:ca:30:53:b3:f0:e4:9b:87:0a:52:62:ec:d4:68:
                    ca:80:97:8e:c7:35:c9:58:aa:16:7f:4a:0a:0a:a1:
                    0c:05:49:92:1f:4a:73:79:b2:bb:34:de:e7:26:0a:
                    94:97:cd:64:19:d0:e2:5f:2c:35:11:42:e7:ae:c3:
                    8f:88:e8:aa:b6:17:67:f9:cb:c8:a1:6e:62:4d:5e:
                    39:90:c4:ef:e9:da:00:52:b3:f0:10:a7:4f:47:5d:
                    df:d2:c9:0a:54:3e:45:60:a4:7c:45:e4:1a:77:09:
                    94:9c:d9:3c:c8:59:51:fb:6a:f9:72:1f:04:78:35:
                    b8:34:89:8c:04:fd:ef:e2:b5:60:6b:63:f3:b7:77:
                    8d:ef:9b:0d:f5:31:f9:2f:b6:c0:1f:96:a5:de:81:
                    4f:8e:14:91:3b:0a:80:09:b4:b0:e8:a2:0b:f2:e5:
                    d9:22:ea:b3:8f:bd:17:ec:6f:45:ca:32:37:a9:3b:
                    42:b8:0a:00:4a:17:82:ec:c6:be:9c:37:e4:d4:c0:
                    45:5f:73:3a:d1:c2:a6:67:3d:82:d2:83:38:76:87:
                    83:ba:ae:34:d4:fd:3d:10:8f:a8:90:45:43:a8:a3:
                    4c:38:72:42:d6:7b:a6:db:38:f1:96:17:b7:43:e8:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:3B:DA:DC:87:BD:91:6C:91:A9:E4:9C:78:4E:40:42:AF:BD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl

            X509v3 Authority Key Identifier:
                keyid:3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:d4:ca:1d:8b:b7:ad:d6:40:f4:78:03:f6:31:da:93:e1:
         ce:63:b9:9b:65:fd:84:25:a7:c5:1e:0a:ad:b1:c6:95:88:01:
         fa:fa:31:67:29:a9:70:d4:fb:bb:97:e5:b9:4c:5f:84:e7:f3:
         d4:c3:0f:03:fa:2e:e6:13:ff:97:f7:89:ac:4e:b5:21:7b:ab:
         be:07:b3:b5:db:30:8c:7f:cb:03:ea:34:ce:db:2b:3e:f4:50:
         5b:15:a8:ed:7f:1a:99:9c:73:ac:f2:e5:41:fd:9d:bd:48:1f:
         b3:38:1c:36:48:0f:59:43:00:a1:cf:69:df:b9:18:df:2d:1f:
         8d:42:2a:0e:6b:61:90:5f:5e:6b:35:a7:7c:69:4d:fe:d0:8e:
         a0:44:fb:d3:bb:c6:56:9e:07:77:41:c8:ca:da:83:7f:aa:76:
         74:d9:54:ea:50:39:1f:55:64:b5:5a:3b:d9:5a:24:b5:8d:17:
         a7:5d:2f:aa:5d:d3:97:d0:64:13:ae:4e:23:61:a8:5b:56:13:
         90:7d:de:e4:a0:20:82:00:fb:72:15:9a:a1:36:10:38:66:5f:
         26:8c:fc:d9:bd:b4:0b:94:90:bd:65:eb:70:2f:fe:37:54:b2:
         80:e3:28:89:92:67:73:84:c7:7d:d6:86:c0:a7:09:bc:8b:3e:
         c8:ea:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:36:46 2025 by rpki-client