Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa
File:                     8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa (raw, json)
Hash identifier:          OFu1eGt02z0H/mtlA1//L15JgUlnZMLNuI4g+4lx6SI=
Subject key identifier:   87:8E:A0:92:8C:1C:96:96:03:CD:50:2F:DA:AB:5E:64:8E:06:04:52
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584A2ABAD08F40883F3E4BFF6900
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     13414
IP address blocks:        209.237.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d0:8f:40:88:3f:3e:4b:ff:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=a7120189-a1e0-4b81-8fa2-285408b9b05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:9e:29:f5:40:40:db:b9:c1:be:4a:6c:12:
                    62:2e:73:20:0a:05:38:9f:2b:6c:d3:66:c4:5f:f7:
                    4c:7d:a2:5c:db:e9:3a:64:30:be:de:0b:90:f4:09:
                    c9:45:c5:85:16:47:8d:9b:8d:a4:69:91:e6:e9:fe:
                    48:14:4d:db:e2:ed:61:f8:57:9d:b1:9b:e1:23:d6:
                    bf:f5:1a:6d:50:9f:89:b9:e5:c9:5a:b3:11:d2:ab:
                    b7:ff:a3:3e:0e:5d:59:60:dd:25:9a:41:ae:7d:6e:
                    f4:36:6c:6f:ec:af:cc:13:49:ef:bb:9b:9b:ee:cf:
                    b1:af:20:14:10:81:71:34:7b:fb:c0:12:46:53:1d:
                    14:6b:2f:34:11:a5:69:de:37:af:16:80:9b:45:7c:
                    c4:c3:71:5f:5b:98:70:a3:f8:a1:88:c9:d6:21:35:
                    78:39:d7:cf:bd:7d:62:2a:e4:e3:94:77:8d:a9:dc:
                    a2:27:cd:a7:4d:fa:16:27:b6:f4:0a:61:dc:a3:fc:
                    f3:6e:c5:db:aa:f0:72:6d:fb:7e:aa:64:53:5d:ba:
                    55:6a:01:58:63:83:ee:42:55:d9:af:11:0d:60:ef:
                    0a:6f:bf:b6:8a:e0:32:8a:ee:a8:2f:ac:31:97:fa:
                    54:81:e4:52:5a:c5:1f:4a:cc:18:f7:03:33:bc:79:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:A0:92:8C:1C:96:96:03:CD:50:2F:DA:AB:5E:64:8E:06:04:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e1:5f:04:98:a3:23:bf:43:a0:0d:b2:d5:0b:42:8a:7d:a5:
         7a:92:32:c1:43:b3:07:03:c3:85:c2:ed:8d:98:31:9e:3f:8c:
         dc:ba:68:ad:d3:b5:da:5c:06:85:7a:44:4d:7b:9d:99:bd:81:
         68:61:b2:fb:55:fc:be:9b:94:d8:99:36:9a:13:7c:dd:7d:8e:
         10:75:34:d3:71:c3:1e:e8:9c:91:5d:bd:7c:e5:b7:72:df:b7:
         96:36:68:9b:da:f8:fb:31:e3:d4:47:0e:4f:9d:92:2b:41:cc:
         1b:e2:93:30:b4:ea:ac:ea:78:dc:68:c2:f3:5c:fb:62:f7:72:
         bb:be:8d:aa:7f:89:bb:cf:ba:d8:6e:e6:7e:91:8a:c7:b0:8d:
         ab:d3:84:f0:52:bc:27:3a:fa:fd:73:96:bf:73:90:95:f3:06:
         cf:62:2c:fb:33:5e:93:18:7b:42:67:e3:0e:9b:1c:38:bd:29:
         d0:d3:3f:a1:c9:11:28:3b:b0:e1:a2:e8:4e:0d:40:34:34:ce:
         16:f2:92:f1:6b:cb:fb:55:95:6c:bc:84:4f:d1:01:47:db:f3:
         de:d3:25:e7:40:b9:75:23:bb:31:25:42:89:a1:42:f1:1a:bf:
         84:bc:bb:76:8b:02:fd:18:45:05:c4:3e:ed:35:59:15:08:1d:
         c7:ea:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 01:38:22 2025 by rpki-client