Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
File:                     879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json)
Hash identifier:          H95+A1whRGDWQHB9R6mof67B3HRxOjiXbFtGSfQel9U=
Subject key identifier:   86:98:B6:36:F2:8A:EF:DE:93:6A:9A:3B:3D:A4:22:33:F5:48:86:00
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F43285849CBCF98EB03F74B2C6C585ED8
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        142.202.36.0/24 maxlen: 24
                          142.202.37.0/24 maxlen: 24
                          142.202.38.0/24 maxlen: 24
                          142.202.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:98:eb:03:f7:4b:2c:6c:58:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=b35805ca-c622-4c49-a89e-81a44d5f3754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:59:91:1a:50:76:ff:05:f4:3e:fb:f3:ab:a2:
                    9b:2b:4b:cd:46:43:4a:6c:68:5a:d3:9b:32:5e:f8:
                    30:d3:61:d6:5e:99:15:bd:aa:6b:5f:91:1f:ff:20:
                    77:3a:82:11:66:00:e9:de:fe:48:91:3c:f3:1d:c7:
                    44:e3:97:6c:d2:d8:1e:63:1a:04:4b:4b:49:0e:68:
                    ec:9b:6a:fa:9a:b3:96:86:3b:78:60:9d:0c:3e:46:
                    85:54:2f:69:a1:e5:f2:01:2e:89:ab:9f:b6:22:52:
                    8a:70:62:a9:53:78:70:e5:c9:c3:63:21:dc:46:8b:
                    59:3b:10:4d:67:fe:2e:0b:54:5d:71:72:fa:75:e6:
                    cd:b6:c1:95:5a:26:97:ba:38:b8:0a:ad:60:0f:a7:
                    80:44:43:48:c8:1f:e7:b5:be:8a:40:61:d2:0f:ab:
                    23:58:0c:df:d7:ac:a8:cd:e5:bb:e3:d8:13:34:14:
                    04:d0:59:82:25:f3:e9:d5:59:fc:01:ef:69:fd:d1:
                    18:89:81:9f:3c:ec:b7:a7:4b:4e:0c:a0:98:02:46:
                    d2:8a:c9:47:8b:35:96:cf:26:18:df:1e:93:16:e4:
                    84:77:9d:39:4c:c3:8a:0e:6a:71:fd:c0:7e:b8:de:
                    11:1c:8b:8a:f3:aa:63:c4:8b:93:39:cd:ee:84:ad:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:98:B6:36:F2:8A:EF:DE:93:6A:9A:3B:3D:A4:22:33:F5:48:86:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:2e:e4:02:99:b1:b2:00:84:ea:db:47:cd:4c:1d:8a:f2:
         94:ad:75:20:7c:d1:2b:46:ba:8e:00:e4:92:2d:83:24:59:0a:
         c6:19:d0:eb:56:24:b5:b5:42:40:bf:81:33:61:81:97:ca:ba:
         28:e7:e1:2b:2f:7f:ab:5f:88:48:d6:03:91:52:83:15:36:32:
         ff:d6:c9:74:fc:88:f7:42:8d:87:ce:2e:64:6d:e0:1a:1e:13:
         32:89:77:77:d1:fd:0e:b6:2b:7c:82:3b:5a:da:65:ce:93:f8:
         03:3c:3a:29:23:c8:6e:12:1d:a2:a2:b9:9c:b8:a5:96:13:b1:
         fb:40:53:85:be:c9:9f:3c:21:8a:c5:57:8a:dd:6f:10:55:9d:
         77:3c:58:51:e4:ce:d0:86:0e:f4:2c:24:df:57:90:c1:9b:b0:
         0f:33:95:5b:c9:76:99:a1:09:69:ec:8b:b8:84:c0:82:d1:86:
         19:50:dd:44:02:88:23:cb:aa:8d:2c:5c:22:9f:8b:09:5e:37:
         67:8e:f3:32:e1:25:2b:4c:8e:91:12:60:41:3d:28:ba:b9:14:
         14:8a:d0:8c:89:76:f7:36:e3:29:4f:ca:bc:25:dd:71:82:fb:
         67:fd:19:c9:f4:88:92:6b:e5:e9:cc:f3:9b:25:eb:90:62:b8:
         e7:7d:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:55:38 2025 by rpki-client