Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa
File:                     b3ae037a-93d7-379e-94a3-ef8de4f644db.roa (raw, json)
Hash identifier:          2utteD5i4mMcxujoQ47xJWgdjn6Q0w2yRRmE+Z9ueXw=
Subject key identifier:   7D:0F:43:AD:89:22:DD:13:4A:E3:9B:EE:A9:39:CE:F2:B7:01:4E:72
Certificate issuer:       /CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
Certificate serial:       010D0C9F4328584A53359A294CFAD68192F87580
Authority key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     14325
IP address blocks:        104.249.184.0/22 maxlen: 24
                          170.39.220.0/22 maxlen: 24
                          192.107.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:9a:29:4c:fa:d6:81:92:f8:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=b0fd6f23-15f6-4a28-ba5b-1c1fa8b19bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:a5:8b:3f:1e:af:89:d9:f7:8f:b9:24:06:
                    52:7c:94:79:37:a9:3d:1e:71:f3:18:a6:f4:df:c0:
                    dc:3f:59:60:cd:43:d7:03:bf:9d:69:04:88:e0:bb:
                    0c:53:40:43:5f:5a:50:0b:14:52:e0:a4:4f:29:28:
                    1c:3b:d4:d9:93:74:8d:60:44:57:81:40:45:6a:87:
                    94:0a:b5:5f:8c:cd:61:37:ea:8e:7d:4b:e0:82:2f:
                    be:9b:ad:a5:45:e4:c6:0c:a8:b0:86:0d:c9:64:46:
                    1e:f7:3b:3d:13:a6:ad:42:d7:be:14:3d:ed:63:f0:
                    62:f8:42:4d:b1:89:9b:52:fa:3a:17:d9:bc:34:a2:
                    da:e7:e2:c7:2e:0d:b6:3f:9e:4f:ae:c1:11:4f:c9:
                    37:4f:23:65:3a:b1:b9:73:35:c2:ef:7d:e3:f0:53:
                    54:90:69:e3:57:8d:97:f3:e9:05:75:b8:56:93:24:
                    00:d1:ad:68:68:8b:1f:62:98:a2:da:36:fc:44:ab:
                    e8:90:a0:95:28:18:c8:b3:6b:7a:76:81:c0:83:a5:
                    f5:0d:52:c8:52:d3:84:d5:3b:c3:c5:37:8f:a9:b2:
                    06:9c:15:18:39:58:04:c4:82:18:04:dc:8b:a3:9e:
                    e2:30:91:7c:f6:8f:33:34:e7:a4:48:e8:4a:28:80:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0F:43:AD:89:22:DD:13:4A:E3:9B:EE:A9:39:CE:F2:B7:01:4E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl

            X509v3 Authority Key Identifier:
                keyid:65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.184.0/22
                  170.39.220.0/22
                  192.107.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:89:83:d9:5b:e4:2b:da:ac:48:4f:2b:25:71:f7:2d:80:1c:
         f3:bd:b7:b9:4c:7e:6f:9c:60:a1:08:4a:09:4a:4a:18:d4:ba:
         3f:17:58:80:de:28:2e:a7:ff:79:c3:e5:a0:7a:33:24:fb:e2:
         c8:22:b6:f1:b0:3c:f0:bf:0a:53:0f:c2:a1:94:48:99:d2:68:
         77:29:9e:04:98:c6:c9:98:b4:1b:35:3b:13:5d:42:f0:a3:3a:
         b3:11:7d:b0:a0:3b:95:23:15:b6:9c:f1:11:56:2c:8f:6e:2b:
         1f:ab:ab:64:2b:6f:62:aa:52:dd:a7:57:33:5c:e2:b4:54:93:
         7f:c0:5a:7c:42:7d:05:00:0d:d7:fe:fb:47:52:66:62:6b:17:
         16:76:17:25:92:0b:db:1e:b1:7f:70:73:58:e8:e4:e9:2a:f8:
         46:10:94:99:24:c9:dc:fd:ee:21:87:c9:52:28:4d:a5:18:cc:
         fb:b6:77:e9:17:f4:9a:8c:00:2a:a5:1b:42:c0:4d:31:e5:59:
         55:54:2f:b7:b9:a6:6b:ea:de:fc:da:2a:f1:43:9d:2f:25:7a:
         49:58:6d:98:4b:b9:2c:88:32:51:fa:61:79:f9:fd:db:0f:82:
         e0:a5:32:43:f5:c9:b6:f8:ab:7a:e2:c7:7b:d3:78:fe:c7:95:
         df:1c:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:27:39 2025 by rpki-client