Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
File:                     36cb5d2c-2469-3a32-877c-bc1354906cdd.roa (raw, json)
Hash identifier:          o4s7vFzXTwl/BF70stlXUhlkDxDJAVjSnUvdDJLW/P8=
Subject key identifier:   28:F4:A4:89:A3:E2:61:94:28:5A:BC:E6:33:78:6A:23:DE:52:49:8C
Certificate issuer:       /CN=83123792-cda3-4a51-83f1-391c845bc812
Certificate serial:       010D0C9F4328584A5A3077721CF6C16AB5E8EC80
Authority key identifier: 60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     397914
IP address blocks:        170.117.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:77:72:1c:f6:c1:6a:b5:e8:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83123792-cda3-4a51-83f1-391c845bc812
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=b49e4f26-26f9-457b-8d3b-69ab9f02084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:ab:2b:c0:f4:7d:0d:e3:80:13:7b:3e:ae:
                    f2:b0:cb:ac:df:45:26:14:9b:e1:1b:b3:23:05:cb:
                    f1:db:b2:9e:e7:ea:1e:d2:1b:5a:67:58:ee:ea:2d:
                    30:79:7a:21:c4:af:4e:b9:3b:43:0d:26:62:39:ef:
                    d7:d5:ee:46:d1:6e:c0:05:9c:49:08:9f:70:cf:bb:
                    ce:cf:a7:87:d3:52:d3:9c:d1:51:d5:ef:36:4f:95:
                    02:42:e6:41:33:4b:b7:4d:7b:4c:6b:c7:ad:87:8f:
                    cf:c3:77:b1:cb:79:52:b4:69:ef:d9:ad:c6:25:09:
                    29:3c:17:78:1d:9a:ad:48:00:53:c1:5b:94:bb:e9:
                    f7:1e:00:b4:64:91:1d:ac:09:f3:6d:a0:7e:29:d2:
                    f6:3a:c4:f4:37:e6:64:e9:88:fc:15:d2:74:e5:90:
                    35:63:c0:6e:76:28:ed:be:7b:de:ee:34:de:f2:12:
                    6e:fe:9b:34:f2:6e:dc:d4:c0:c6:95:93:31:b6:da:
                    16:75:79:c8:36:11:70:fe:34:0d:f4:57:83:29:06:
                    22:d9:ef:44:c0:ae:cb:5b:67:51:c7:d5:8e:60:88:
                    82:c3:92:4c:ed:2d:81:c4:b5:66:84:03:b8:a7:4a:
                    a5:c6:ee:00:da:cd:1b:ac:59:37:76:a4:a7:19:ce:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:A4:89:A3:E2:61:94:28:5A:BC:E6:33:78:6A:23:DE:52:49:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl

            X509v3 Authority Key Identifier:
                keyid:60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:34:12:65:d9:b2:9a:d1:64:ef:33:df:d7:f4:61:42:aa:
         f8:f3:4a:9f:f6:a1:6e:ac:13:e0:14:8a:29:de:be:ed:eb:8e:
         fa:c0:35:5c:76:86:e0:c2:99:4c:ff:20:fd:d1:f9:1d:a6:8b:
         73:ab:86:bc:df:45:33:86:95:eb:80:1d:01:9d:1b:10:27:8d:
         a5:b0:34:f9:f0:6e:24:92:17:70:cc:b6:8c:a2:5e:0f:7e:9f:
         e3:b4:43:3c:98:aa:e3:16:c9:b7:da:c3:3c:8f:dc:aa:a4:87:
         73:79:1a:64:a7:9b:4b:49:0d:8b:74:86:bc:40:91:a7:99:9a:
         df:a4:5b:4d:8d:86:9d:66:a6:e4:7c:a5:d2:ef:05:b7:52:97:
         38:c4:15:15:bb:cc:68:1a:bd:c8:04:31:56:0f:f6:d8:c7:e8:
         87:95:37:2a:c6:b1:0b:b6:c7:cc:d3:d2:a7:62:70:50:59:f5:
         d7:5a:0a:c6:92:8e:5f:ea:fa:7b:21:ae:17:31:bc:f3:ad:3a:
         a4:fc:0d:04:4d:7c:4d:31:4d:db:2d:52:7b:b8:6f:d7:d7:43:
         5b:ec:b7:7c:25:0a:d7:56:13:5e:74:5d:72:c9:d8:1f:f5:f4:
         41:3f:6b:02:32:ed:82:be:f4:40:be:7a:f6:c6:1c:02:db:10:
         fc:67:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:53:27 2025 by rpki-client