Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
File:                     fa603d7b-627f-38af-83f9-1ffef126c099.roa (raw, json)
Hash identifier:          u5yk4iTd48EAtBnrY724Hw8UxZziv4SJ5pZPS8fmqKE=
Subject key identifier:   1B:EB:CF:18:4E:5E:FE:54:87:0E:4B:B6:2D:9E:CB:81:D5:F4:CF:C3
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F4328584ADA9BC6A5C185D8C4E99FB440
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     19201
IP address blocks:        64.127.160.0/19 maxlen: 24
                          66.171.0.0/20 maxlen: 24
                          170.62.0.0/19 maxlen: 24
                          198.183.172.0/24 maxlen: 24
                          199.30.120.0/21 maxlen: 24
                          199.127.220.0/22 maxlen: 24
                          199.187.248.0/21 maxlen: 24
                          199.201.76.0/22 maxlen: 24
                          208.54.160.0/20 maxlen: 24
                          2605:27c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c6:a5:c1:85:d8:c4:e9:9f:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=713651d3-be38-4934-8ffe-04d8c8406b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:eb:26:15:f1:31:8e:17:31:5d:03:8a:60:
                    59:91:1c:77:31:3e:5a:c4:78:c0:6c:3f:47:06:7b:
                    4c:8c:10:bc:b1:30:60:99:5f:bb:c4:0f:7b:b7:89:
                    76:76:7d:8c:56:8e:b2:09:05:98:3a:d9:57:88:81:
                    39:4f:04:58:b9:63:0a:1d:e6:2f:77:90:8e:c4:40:
                    2a:82:3d:f5:f7:6f:99:a1:e9:60:24:bc:5f:fc:1b:
                    4a:0c:68:8a:e3:38:d3:1e:bd:1c:68:ee:a9:cf:65:
                    3f:c6:83:6a:28:90:7f:ec:bc:20:fb:f4:0b:03:2a:
                    0c:ed:c9:8b:27:87:a4:5f:b8:48:88:d8:2b:2d:59:
                    19:b1:55:83:8b:4b:64:96:8e:fb:4e:b0:1c:e1:95:
                    72:7c:56:c7:6a:23:cd:14:68:7f:b6:4d:22:5a:86:
                    45:be:5d:51:66:d2:b8:04:de:a7:03:bf:da:0e:35:
                    a5:6e:35:87:35:b5:ec:0a:d4:b9:27:b8:67:f2:08:
                    35:c6:bf:4d:b7:fb:8f:29:28:49:85:a8:89:24:31:
                    f0:d0:ec:df:ad:aa:f8:45:8b:a7:9c:2b:d5:10:02:
                    75:3f:43:57:98:af:08:ae:cc:80:93:5c:c2:98:87:
                    8b:62:7f:bb:e5:d9:18:5e:00:b1:cd:3c:bd:e8:f6:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:CF:18:4E:5E:FE:54:87:0E:4B:B6:2D:9E:CB:81:D5:F4:CF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.160.0/19
                  66.171.0.0/20
                  170.62.0.0/19
                  198.183.172.0/24
                  199.30.120.0/21
                  199.127.220.0/22
                  199.187.248.0/21
                  199.201.76.0/22
                  208.54.160.0/20
                IPv6:
                  2605:27c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:54:65:49:63:60:15:cd:f2:dd:23:2c:32:d6:4c:52:3f:80:
         53:ea:5e:7f:c0:f8:54:05:1b:fd:50:12:11:b6:59:65:1f:86:
         64:c9:24:7c:d1:d1:e3:d5:81:83:3a:d6:bf:42:de:80:3f:d7:
         6d:c2:fe:83:dc:43:c4:23:4c:a2:a3:9f:fe:ce:42:d5:52:95:
         57:6a:c1:99:af:58:75:2e:e3:0d:e0:c9:c8:1a:df:ed:9f:bb:
         78:76:65:b5:1a:86:a1:3b:7e:88:e4:3f:a4:fc:6a:16:24:45:
         7d:70:06:fc:ab:67:e8:b8:9f:a9:ce:11:f5:e5:d0:60:1c:a2:
         01:3b:f6:c2:08:ae:e6:22:4a:63:de:be:3e:0d:4b:c4:08:d9:
         f3:ed:71:ed:b4:7a:bd:a5:3a:f6:bb:f3:ea:42:fa:b1:8e:67:
         06:70:38:57:ed:3f:be:7c:d7:67:07:27:ec:d4:ad:45:26:4a:
         eb:6b:9a:a6:99:3a:30:da:6c:db:54:33:d3:a6:b0:ad:19:15:
         bc:83:d7:47:5d:1a:a9:d0:43:92:59:c8:b6:20:b1:ee:0d:b7:
         08:f1:59:b6:ef:55:04:4f:0a:dc:62:0a:72:0c:ad:3b:0d:0a:
         c7:cd:a8:15:1e:ac:58:84:f2:a7:f9:a3:7c:6b:32:2e:19:64:
         0d:95:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:43:37 2025 by rpki-client