Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa
File:                     6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa (raw, json)
Hash identifier:          6sYeIG7zpuBk4n1/LGLUa71+HdSj3PlwlAJ39B+anvc=
Subject key identifier:   E9:CF:29:58:F1:26:E6:E2:06:BB:2A:7D:AF:A0:2F:C8:05:CC:05:38
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F4328584A56004E84D77B517C3B214D00
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     43641
IP address blocks:        208.70.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4e:84:d7:7b:51:7c:3b:21:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=19d990e7-8691-434a-950b-3ea3dba79813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:6b:d4:60:e9:3e:41:7e:d9:75:7d:39:23:
                    71:c7:92:c8:0a:7b:77:d5:73:24:2f:e8:b7:96:a5:
                    0b:d0:ea:cc:c0:6a:61:8c:fa:58:59:5c:7f:25:3f:
                    b7:84:33:f9:23:85:f5:0a:62:81:41:37:42:06:59:
                    3d:14:ad:5f:c0:f5:2a:36:a9:5c:bb:59:ea:fa:c2:
                    e8:17:0f:cc:36:a0:b6:0d:29:f3:6f:34:3d:01:83:
                    11:5c:bd:9e:c4:f3:3b:30:ca:b5:5a:e3:c6:30:3b:
                    67:83:94:e6:fb:b0:47:54:f0:47:1e:a4:3e:04:58:
                    60:25:90:e1:de:88:fd:6f:0f:1d:6d:a2:72:8f:39:
                    d5:b7:b3:36:28:4c:6d:4c:4a:9c:c8:25:e3:b5:d5:
                    b0:56:4d:7b:f6:ae:1e:4a:81:d6:e2:84:fc:55:cb:
                    f3:e5:98:c1:5e:09:62:eb:96:79:25:90:3a:c9:09:
                    ac:9b:ef:3f:b6:0b:57:cb:ea:ad:6a:dd:40:c1:cc:
                    33:a3:c2:36:52:a1:8d:64:1c:33:d1:4f:00:3e:eb:
                    ce:6e:93:8c:bc:16:cc:5f:2b:ef:c1:85:26:9a:22:
                    7b:dd:c5:20:ec:8f:c7:13:37:83:9a:88:dd:8a:0e:
                    98:71:65:ab:14:b0:95:1c:f8:27:18:3d:a6:14:ac:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:29:58:F1:26:E6:E2:06:BB:2A:7D:AF:A0:2F:C8:05:CC:05:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:ce:1e:a2:60:2c:08:f1:42:07:e5:11:8e:ab:14:86:cc:
         45:b9:ec:4f:a0:c9:c0:71:c9:57:60:fa:d5:7c:bc:04:b8:7d:
         90:d6:cf:7a:a0:f6:34:30:83:ad:53:33:71:38:03:9c:ff:9c:
         a3:27:b9:40:52:58:ad:2b:01:a3:6b:67:37:2f:f6:ea:eb:21:
         ae:80:3c:2e:d7:cb:1c:7b:4e:9f:55:6e:2f:ba:21:28:4f:b8:
         5f:2c:2e:4a:cd:7b:44:81:98:b7:c0:64:a6:3f:ae:91:f9:99:
         6f:cb:fc:6a:bc:3d:74:06:7d:3e:ae:21:3f:fd:4c:54:04:58:
         3d:d6:ba:43:dd:35:ac:8d:4b:70:05:15:d5:f1:f5:41:81:a0:
         42:b1:f2:d1:d2:80:f0:d4:54:de:66:b7:05:55:96:f0:4a:5a:
         0a:ef:8c:a6:cc:4f:11:83:af:e1:36:1b:b6:ac:db:e2:94:3b:
         f2:d5:78:27:68:cf:21:1f:66:da:80:ee:86:6c:29:89:37:7e:
         de:c7:45:57:24:c9:1c:2b:92:50:0d:be:33:f6:f0:21:70:ad:
         0d:30:c8:5e:82:95:51:a3:5d:50:43:00:49:21:af:c3:5a:4e:
         7c:ee:4f:86:31:e7:63:1a:b0:df:09:be:75:75:cf:b5:29:36:
         4e:a4:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:37:23 2025 by rpki-client