Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
File:                     5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa (raw, json)
Hash identifier:          VeezslMc1RybeviFr4tUtNMjS4Y/vdr0wtsFKbqgFEc=
Subject key identifier:   4F:DF:44:22:8E:F0:5F:D6:84:CC:28:3D:AA:B5:05:FE:B0:64:10:64
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A612B157A5B162C7796E11700
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     13768
IP address blocks:        65.39.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:15:7a:5b:16:2c:77:96:e1:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=9f812c6b-ec5e-4350-8001-38e638a8e181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:e9:df:28:65:a7:b5:55:4e:c5:b8:59:83:
                    64:92:89:4c:a2:36:f6:66:50:73:27:cd:83:f4:78:
                    8e:e0:0c:c3:05:02:2c:41:12:2d:47:c5:b7:f6:d7:
                    9e:c8:fe:41:14:5f:bb:e3:72:84:d4:59:d4:d5:71:
                    fd:3c:f8:af:79:0e:0e:03:6b:b9:2a:a2:45:f0:58:
                    ce:82:55:ee:a2:15:26:9a:26:49:41:da:3b:47:d5:
                    08:d4:ca:43:be:ef:17:5a:5c:fd:0a:23:28:29:73:
                    c3:7a:e2:47:bb:7a:fb:62:bc:88:b1:f6:10:f8:d4:
                    e1:92:cb:66:a4:79:97:9e:5e:9b:bf:4e:44:af:8f:
                    70:f7:3a:cc:b9:c7:4d:bd:70:92:72:a3:fc:56:0f:
                    dd:1b:fc:10:2e:a0:5b:35:99:b0:49:18:42:9d:00:
                    25:62:ec:a7:c1:f4:2a:83:00:bd:7d:e8:a1:95:02:
                    47:0e:5c:31:3e:ba:d8:18:c1:e9:21:63:e4:cf:53:
                    a7:8e:92:18:7b:35:a0:21:3b:06:f0:d6:3d:ab:fc:
                    fc:be:b7:7b:68:53:f7:3f:d4:f2:f9:78:58:a4:d1:
                    86:e5:9a:36:c2:b3:c6:12:02:8a:df:2a:23:29:17:
                    77:a0:00:c6:71:57:c1:da:6e:ce:56:1b:12:88:f8:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DF:44:22:8E:F0:5F:D6:84:CC:28:3D:AA:B5:05:FE:B0:64:10:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:66:1a:00:56:0b:66:ee:ee:e7:1a:eb:14:dd:cc:5d:71:88:
         14:01:a0:1c:d7:7c:e8:5a:47:0c:e4:f2:74:35:78:f3:04:d3:
         e9:bc:29:75:a2:9b:35:2c:c6:dd:34:1b:3f:0d:0a:c8:e9:6a:
         59:6d:57:3a:27:e3:b0:b7:9d:8f:b3:6b:43:bf:b7:0d:fc:de:
         96:0b:f3:81:8e:ed:19:8b:e6:44:8a:e8:26:57:ed:e6:6d:7f:
         af:e8:14:62:51:f3:82:26:19:16:32:b7:7d:9f:9d:38:ce:02:
         98:c2:8a:ac:7b:40:de:73:48:ec:64:66:38:7a:25:0f:5c:b7:
         b2:72:22:39:9c:1a:0c:61:96:9b:b0:55:20:88:40:6d:fa:c5:
         48:e9:e4:ec:e4:50:51:c7:47:b3:ad:1c:a9:ef:84:69:ca:7f:
         84:a3:09:a2:a8:73:e5:b0:37:0f:6e:aa:ad:94:21:ae:89:23:
         6c:04:14:08:6a:61:5b:19:91:42:42:c5:fc:0d:91:49:54:c5:
         cc:86:f7:19:b7:33:ab:b1:05:ed:be:6d:f9:d1:64:f2:80:4c:
         18:8e:8c:47:3b:31:95:bc:6b:a3:02:34:61:70:bd:37:2e:0e:
         f6:59:61:dd:d5:6b:ce:5e:35:dc:04:6e:1c:ed:95:c7:49:f0:
         33:ea:db:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:41:56 2025 by rpki-client