Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa
File:                     2d50375f-8500-3214-a11f-bd594b4aa849.roa (raw, json)
Hash identifier:          EfE+QHZlV1zCGRNFads2pc3gZKPgQw7S9COWKJvJU6I=
Subject key identifier:   80:B0:4E:64:C5:5A:10:04:83:04:FD:01:56:5F:6C:61:21:47:6A:B6
Certificate issuer:       /CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65
Certificate serial:       010D0C9F4328584A103540E6819717E986C9FE60
Authority key identifier: 73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     7773
IP address blocks:        164.154.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:40:e6:81:97:17:e9:86:c9:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=23b0b8f8-14fe-47a9-b83e-22ef5fadb6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:98:12:9a:0e:b5:96:10:70:36:68:e9:dc:
                    60:23:67:cb:fd:05:e3:cf:75:49:e7:48:a5:55:0b:
                    8c:1e:35:f1:67:a9:25:66:4a:62:a4:19:f8:6d:27:
                    a7:64:56:6c:5e:53:e3:0a:e4:99:98:18:91:44:20:
                    2e:3b:fa:3d:d9:d9:05:f8:97:c5:11:a1:5f:0f:39:
                    fd:bb:1e:ff:60:55:d8:11:78:ca:f9:fe:be:ce:f7:
                    df:4d:e6:54:9a:c0:bf:34:5b:2b:43:00:80:6d:7e:
                    95:f4:4c:04:02:a8:1c:c9:ed:5f:00:b4:30:8c:a1:
                    80:4b:a3:25:92:09:f8:61:a0:78:39:7a:27:c8:ab:
                    b4:81:a4:a6:f6:e5:de:b5:a3:28:df:0c:b9:36:cf:
                    13:c1:20:f5:29:b6:2c:42:7a:b1:3a:e2:6d:22:8b:
                    a6:39:cd:dd:43:ba:10:45:79:5b:6f:38:fc:e6:bd:
                    9b:6b:7a:f9:06:94:15:72:e6:b8:17:50:bb:22:38:
                    d3:47:23:2e:aa:e8:72:14:ea:c4:27:b4:2a:c9:65:
                    6d:ff:d1:51:12:ef:fd:68:67:a8:76:4a:12:f8:fd:
                    7f:62:e3:49:9a:ba:fa:86:56:bb:9b:1e:dd:1a:88:
                    c6:f1:4c:dc:05:6a:95:df:f5:ba:87:fb:0e:d0:bc:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:4E:64:C5:5A:10:04:83:04:FD:01:56:5F:6C:61:21:47:6A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl

            X509v3 Authority Key Identifier:
                keyid:73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:3d:82:4d:e3:b9:36:7d:f4:56:7c:b1:f9:1a:87:ff:fd:
         da:c7:37:a1:f6:d4:9e:32:99:c4:20:20:8e:8a:73:d8:c4:67:
         81:54:1a:ee:fd:f8:1f:c8:b9:e5:a5:d1:3b:ee:c8:ee:3b:be:
         a8:d4:dc:7b:7c:6a:33:4f:62:22:57:4d:97:ed:9a:21:4e:6b:
         ff:7a:dc:22:00:5f:4d:e3:72:66:17:eb:be:37:bd:7a:0f:33:
         a4:87:cb:60:46:3f:f2:59:e9:78:e9:9e:8d:0e:eb:31:16:f7:
         6e:9d:fa:61:3f:8d:ab:4e:6c:cc:a4:93:4d:6b:be:3e:f8:d0:
         85:19:de:50:1e:47:c6:3b:d0:f2:e0:11:e7:b0:0b:30:f7:e1:
         a9:ba:f8:ff:37:fc:82:4f:60:e4:e6:2e:60:cb:ce:98:09:0a:
         23:01:23:0f:1b:06:00:90:d8:0e:e0:78:b8:76:f9:f6:8f:85:
         0f:32:be:ad:69:22:12:25:af:f9:89:9f:8f:d4:26:1f:33:99:
         8a:f0:31:ef:1d:61:42:ff:f4:b6:24:45:87:dc:73:41:80:10:
         10:f3:5c:53:5b:5e:cc:3c:14:9d:20:4e:04:4a:78:8e:85:e6:
         8e:15:77:9b:e2:f7:88:40:37:43:03:88:e9:f1:3e:6d:e0:19:
         52:ed:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:28:18 2025 by rpki-client