Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/bb29b8a0-c706-399f-aca2-a8331d765d6c.roa
File:                     bb29b8a0-c706-399f-aca2-a8331d765d6c.roa (raw, json)
Hash identifier:          QjK7CuO6PIfx2p534zZ65XRDrS84uipJxOtxKwyfki8=
Subject key identifier:   7D:63:38:A5:A3:18:F7:31:65:6F:78:78:A1:7D:12:80:8F:92:FF:6F
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584AA42B8F58E72C270C1B663D40
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/bb29b8a0-c706-399f-aca2-a8331d765d6c.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     395743
IP address blocks:        209.104.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8f:58:e7:2c:27:0c:1b:66:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=d3c1afad-9e78-4b87-9e69-f4101c5dad83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:e6:c2:48:d2:80:0d:a3:ac:0f:07:b8:65:
                    96:a8:39:b0:3f:be:bd:00:bb:4f:e6:48:cb:f7:99:
                    1a:a6:97:20:6c:af:3b:1e:34:45:ee:98:4c:08:55:
                    12:63:aa:d3:80:c7:da:f3:5f:d5:4c:91:31:4b:79:
                    b6:f1:8e:e6:32:12:a4:c7:c0:54:2d:87:28:42:d8:
                    25:95:06:97:28:cc:a8:98:18:48:60:16:4b:b5:10:
                    6d:0f:a2:bc:67:65:ac:6a:2e:e5:e2:4e:c1:c7:0c:
                    de:a6:f2:99:80:ea:e6:73:77:00:a8:fc:17:e8:40:
                    0c:16:9c:75:42:36:b9:30:84:00:81:d6:22:e8:48:
                    41:1e:f7:61:42:2f:22:26:23:ce:d9:c6:9a:46:9b:
                    c7:f3:b7:9b:b4:67:12:70:1a:e4:b4:55:7f:2b:b9:
                    58:7f:44:96:bc:a5:08:6d:9d:4e:1f:00:0c:b3:13:
                    4c:dd:c6:88:b2:7e:c8:dd:e2:ee:b5:31:21:d1:4d:
                    9d:a4:58:41:17:06:2d:a5:fe:52:f1:9b:99:ed:85:
                    b4:4b:44:ac:9e:ef:9c:59:d2:22:c4:10:77:31:7b:
                    b5:5f:62:5d:29:25:3f:6e:4e:d1:f3:37:bb:1d:17:
                    18:5c:76:a5:3f:d4:b4:a3:96:44:4b:de:96:f0:c0:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:38:A5:A3:18:F7:31:65:6F:78:78:A1:7D:12:80:8F:92:FF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/bb29b8a0-c706-399f-aca2-a8331d765d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1b:d1:30:7d:58:7f:5d:c6:53:75:b7:da:fc:75:e3:e7:4c:
         d0:3e:5a:c9:04:34:c9:10:b2:e6:f6:b6:e8:d0:ac:11:db:1a:
         e1:6f:b4:f5:f8:ff:01:97:77:28:6e:b0:88:8e:e9:84:02:10:
         07:44:ca:bf:a7:9f:85:36:0e:e9:df:e9:b9:ec:b0:5f:47:15:
         90:9f:b0:8a:85:fd:40:03:e0:e9:16:29:fb:a8:69:01:cf:d3:
         71:da:da:08:91:50:e4:32:df:7b:cd:11:8d:62:67:7c:da:05:
         ba:41:a9:78:4f:58:84:f8:f2:41:fd:35:6d:bb:e3:97:19:57:
         72:3b:6a:c5:ba:1a:a1:a3:ac:51:37:31:ee:5f:70:b0:73:de:
         a6:be:34:93:62:80:59:66:2f:d0:fb:97:41:63:df:a4:0d:12:
         90:2c:0c:44:1d:34:6f:b0:58:4a:a9:5d:d9:b5:e6:8c:e5:82:
         61:fe:a6:9c:1e:92:1c:54:ba:d3:71:ad:21:f2:52:2c:57:06:
         61:68:6e:b9:ec:80:f6:55:39:64:a5:54:d5:5b:06:fc:41:33:
         a9:ad:9c:3b:64:90:bf:52:f0:46:c0:e5:1c:bc:e0:ab:cd:ac:
         1f:ac:85:ad:7d:55:2b:ec:e2:28:af:bf:7a:d0:e0:f6:b9:b7:
         20:9a:f2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 19:09:28 2025 by rpki-client