Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83b204c6-4c72-314b-b9b8-f1ee1f6f255c.roa
File:                     83b204c6-4c72-314b-b9b8-f1ee1f6f255c.roa (raw, json)
Hash identifier:          dppzj81aE5ys9gWk3GAzJO1iJOL+yWil0Zedbm4G5qw=
Subject key identifier:   B1:60:22:C4:54:A3:4F:5C:43:F7:51:42:ED:F1:0E:CE:2E:20:7B:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07F40DC20237D9F8E12600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83b204c6-4c72-314b-b9b8-f1ee1f6f255c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        69.243.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:f4:0d:c2:02:37:d9:f8:e1:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3b967472-9873-4ee4-9a09-9914a56106c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:f9:0e:62:94:7c:c2:77:eb:17:06:99:1e:
                    07:40:de:65:2e:81:b1:4b:92:84:ba:b0:a4:91:05:
                    60:d0:15:e7:8d:69:69:03:8a:e6:1a:21:4b:16:4b:
                    28:70:91:7c:b7:08:78:8e:0b:7a:97:6b:35:50:e3:
                    f8:b1:eb:31:2d:8c:24:39:22:76:7b:bf:d6:70:83:
                    32:6f:4a:01:a0:56:7a:b4:c3:03:a7:83:e7:4a:e9:
                    2e:2f:8b:53:7d:44:e7:f9:d7:3f:c6:79:5a:9f:96:
                    71:9f:41:99:7a:f9:e0:3e:4c:1b:b6:dc:50:67:50:
                    10:2b:b3:20:75:18:57:ed:a6:f0:3e:e0:03:90:e3:
                    72:7f:c3:98:4d:2c:85:a0:0a:53:9e:9f:92:e3:c0:
                    7d:b6:a9:f1:e6:04:07:46:4b:b1:5b:7f:46:2c:c9:
                    6b:ef:61:43:df:5d:06:bd:c9:0c:cd:b1:da:e5:15:
                    19:ce:39:e5:9d:fe:f9:41:02:62:cf:1e:54:63:67:
                    30:49:a2:1f:86:89:38:33:c4:f1:39:3f:86:b9:d3:
                    05:58:b9:10:8d:3b:9a:e3:80:86:21:e3:b2:1f:4c:
                    ab:d7:aa:97:aa:2b:ed:74:37:84:b0:de:63:f5:65:
                    1e:1c:2e:25:11:dc:d0:3a:66:73:ca:16:14:af:29:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:22:C4:54:A3:4F:5C:43:F7:51:42:ED:F1:0E:CE:2E:20:7B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83b204c6-4c72-314b-b9b8-f1ee1f6f255c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.243.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:db:77:8a:59:4d:5f:58:58:2e:ca:0b:3e:0d:fe:96:dc:
         7f:87:63:87:4c:81:c5:f8:b6:f0:c8:bf:0f:8d:86:e0:69:33:
         41:c6:c4:0c:b0:4b:43:a3:4e:30:f8:89:3f:6b:98:4c:02:2b:
         39:ac:21:f7:6f:70:8c:c0:63:ad:8b:1e:58:0c:34:51:2a:1f:
         35:4c:8c:f1:c1:94:14:7d:62:27:4e:a5:98:be:a6:8d:d9:31:
         a2:b0:09:16:aa:91:49:db:51:56:2f:56:a4:3b:78:c8:9f:93:
         52:4a:79:49:a0:fd:82:93:91:a5:72:f5:ae:7f:cd:e4:91:b0:
         62:75:72:b4:04:db:00:1a:fa:98:b2:f2:46:a4:08:b9:89:e8:
         94:80:ad:92:44:12:35:22:eb:f8:42:ac:0b:04:99:1c:db:92:
         50:c0:3e:09:02:fb:50:de:53:35:19:49:f5:98:87:b4:76:61:
         bc:d4:b3:b7:8e:bd:8a:c3:64:7b:6f:05:f5:05:8b:c5:f5:67:
         40:c8:75:a3:a5:f3:87:bd:ea:29:51:f5:f6:2d:2c:2e:76:7e:
         ed:02:87:4a:35:df:6a:04:5c:88:f9:f0:22:ed:1c:e3:75:69:
         e1:b8:71:4d:53:67:0a:15:f2:01:cf:ff:6b:29:8e:3e:68:c0:
         e7:56:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:03:56 2025 by rpki-client