Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa
File:                     d924e41a-9907-3a14-8ffd-e0cba482d05c.roa (raw, json)
Hash identifier:          v4J9iQym48cMyf970y2vu5LWhnMBlwCRej2YRYprAjw=
Subject key identifier:   FB:88:84:8F:47:DD:34:DB:4E:30:93:AF:46:55:9B:5F:1C:52:84:C0
Certificate issuer:       /CN=bd1b51cc-6012-4051-ac58-1514226329e4
Certificate serial:       010D0C9F4328584B1D9C2C842E483820CB4852C0
Authority key identifier: 9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     21976
IP address blocks:        134.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2c:84:2e:48:38:20:cb:48:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd1b51cc-6012-4051-ac58-1514226329e4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=06869a1f-99c5-4b7d-9e9c-f62e80adc7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:e3:ab:18:f0:09:77:a9:2b:96:84:c6:1d:
                    20:12:b9:8b:16:b8:12:f0:06:fd:ee:20:5d:85:71:
                    a0:96:07:aa:7e:ad:48:3c:c8:c7:3b:a6:34:5b:41:
                    ff:6b:92:cf:29:0f:22:6c:88:1d:ac:dc:45:96:4d:
                    43:7b:9e:c0:55:0d:2f:c1:6e:21:f4:d9:30:9c:4d:
                    23:ba:1e:c1:67:3c:9d:b5:d8:ed:b3:ae:ba:a9:6e:
                    83:70:9a:61:cd:0e:8a:2c:5b:61:b6:91:c2:9d:17:
                    76:8b:91:72:cd:fb:5b:3a:a4:ab:04:95:f7:b6:d6:
                    73:1b:92:a2:80:58:ac:a1:fd:94:f8:48:76:e0:bc:
                    d1:e0:22:74:45:bc:06:b5:77:d1:ec:94:36:d0:de:
                    f2:de:83:b9:24:2a:0b:c1:1e:5d:e3:29:9c:43:b1:
                    92:93:f0:63:71:bb:60:73:df:2c:16:e4:64:48:94:
                    d7:ab:6f:dd:d7:c6:e6:0f:34:72:7f:94:40:36:78:
                    e9:a5:82:5c:eb:c6:dc:09:a9:41:9a:d9:20:bc:4f:
                    9b:d9:41:1f:34:98:e5:1c:67:87:1f:3f:b5:c2:c9:
                    17:a2:fb:a6:3d:e5:ca:5b:d3:76:b2:43:5f:05:d9:
                    54:44:30:14:f1:ba:17:58:0f:5a:fb:bf:10:cf:aa:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:88:84:8F:47:DD:34:DB:4E:30:93:AF:46:55:9B:5F:1C:52:84:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl

            X509v3 Authority Key Identifier:
                keyid:9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b5:91:5b:9f:6c:b6:cc:db:83:7c:23:77:92:1f:09:5e:d5:
         b9:d2:73:57:72:4e:0b:df:46:96:b1:3a:c8:01:99:2f:5e:0f:
         8e:7e:c0:fa:5d:b2:aa:de:0d:9c:85:cd:51:70:ac:e7:16:54:
         70:82:c1:eb:92:70:de:d7:05:57:68:08:bf:b8:e4:bd:65:d4:
         85:9d:6a:ae:35:24:29:9d:05:c7:00:4a:dd:47:5c:97:53:e8:
         89:d1:19:57:e2:f4:d7:8f:41:35:fb:f6:15:82:85:9a:fd:c9:
         40:c5:34:c5:d2:bd:fc:74:41:ab:81:0c:a9:e7:97:11:e4:34:
         d9:9e:42:9a:3b:01:c8:e9:21:82:56:34:91:3c:49:e7:e0:d0:
         bf:b4:09:85:6f:77:72:80:26:6c:5a:37:08:d0:08:6d:c3:b2:
         3b:73:25:95:df:3c:dc:52:5a:96:57:8b:ce:8c:16:55:1c:34:
         11:2a:2a:d4:2d:15:32:a1:09:57:db:10:c8:ea:eb:c8:6b:e5:
         52:f1:92:43:66:80:17:f9:ca:ad:aa:2f:42:58:a0:ce:63:8e:
         14:c0:1c:41:4e:37:07:28:f8:6d:e3:90:36:cc:f0:09:76:67:
         07:af:20:e5:82:c4:30:54:02:1d:a6:31:35:a6:31:0c:22:02:
         1b:24:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:18:45 2025 by rpki-client