Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/27638bc0-dcdb-3375-a50d-634c10ee9cee.roa
File:                     27638bc0-dcdb-3375-a50d-634c10ee9cee.roa (raw, json)
Hash identifier:          6L7ekbIYwwkvIgn0I75OPgVD4WWgT+Fn30IekKbnTkA=
Subject key identifier:   EB:9B:F5:6B:57:A5:31:BD:8A:1D:F9:9B:2A:FF:0A:A5:D9:31:9C:D3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16E679EDF41671C081C44
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/27638bc0-dcdb-3375-a50d-634c10ee9cee.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        204.84.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6e:67:9e:df:41:67:1c:08:1c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=3790307d-873d-4e4a-b02c-a88293283d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:55:f9:bc:8e:21:cc:a0:a3:b1:08:0d:bd:
                    21:4b:52:e3:d5:81:dd:61:9a:1c:d9:fb:cf:14:cc:
                    a9:dd:c6:04:c3:2c:27:c1:58:aa:22:66:61:fa:ea:
                    c8:a9:bc:b8:41:05:ff:2a:bb:66:d1:3f:08:d2:c7:
                    c8:81:db:74:b6:86:b9:bc:dc:be:d8:f6:0c:e9:f0:
                    00:25:03:3a:74:0a:db:ef:21:fa:a5:1b:22:6d:9c:
                    a7:69:4b:fa:bc:c7:f9:20:29:5b:40:31:07:db:e9:
                    76:6e:b3:a4:d3:e5:bd:43:cd:94:10:7a:bb:1e:9e:
                    8c:b2:e8:4b:38:a0:6a:35:34:9c:f0:71:91:0c:f6:
                    66:b7:41:03:4a:29:4c:ad:5a:fe:b9:d4:c5:0c:42:
                    f5:bf:a8:07:ac:7e:18:2f:48:a1:3e:a8:11:8d:86:
                    1a:6b:70:f5:23:99:da:5f:aa:ca:51:b3:b2:cb:8f:
                    2f:a5:14:95:90:c0:8a:84:f7:97:38:6b:1e:cf:1d:
                    3e:16:25:56:d3:0a:83:5e:2a:fc:70:0b:ce:43:1a:
                    75:f0:36:00:80:b2:91:e9:ef:dd:fa:ca:10:00:c5:
                    51:bf:bb:27:45:42:13:76:74:c7:fe:17:23:7f:c9:
                    b4:f9:38:e7:87:c9:b8:c3:0f:7c:27:72:0a:08:2d:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9B:F5:6B:57:A5:31:BD:8A:1D:F9:9B:2A:FF:0A:A5:D9:31:9C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/27638bc0-dcdb-3375-a50d-634c10ee9cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:21:80:9b:d0:52:c7:3e:fe:b6:20:27:7e:ad:7e:53:a0:b1:
         0a:8b:db:49:63:fe:ba:55:d7:df:b4:01:09:4d:aa:3d:59:ac:
         6f:a0:56:75:17:38:40:1f:a0:4d:8b:13:8e:9a:ec:80:3f:d1:
         51:91:d3:b1:19:72:82:6d:38:92:df:c5:e6:51:e6:2d:0f:7b:
         88:63:25:14:cb:d3:ef:d2:87:92:99:eb:0c:83:3d:d8:14:e8:
         fd:2f:e1:0e:3f:64:8b:f4:e0:6f:c3:4d:2f:d1:d2:03:d3:12:
         a8:ff:c3:04:e8:42:12:b1:1c:2b:ab:53:45:d1:39:e1:83:d6:
         d1:ca:50:63:f6:96:12:29:53:46:d5:30:7d:87:70:73:47:f9:
         18:59:d3:57:56:46:b6:14:1e:45:cc:52:dc:5b:a9:f2:7b:66:
         40:03:f8:ac:f6:3b:31:67:ed:55:53:0c:74:07:29:b6:19:24:
         99:e6:ab:95:85:c2:37:25:00:f4:55:da:a6:e5:ad:a2:be:42:
         f4:3b:8c:a7:aa:83:dd:47:d8:4e:c9:59:a1:f7:cc:c8:45:df:
         33:88:e9:af:84:a0:fd:ff:28:ca:96:57:d2:7a:97:b6:cb:4a:
         8b:1f:58:c0:f9:96:74:d6:9b:73:08:a5:a8:07:49:31:92:32:
         8c:ee:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:59:35 2025 by rpki-client