Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e0cb77d6-a0c9-3023-87a8-44d95bd7b8d8.roa
File:                     e0cb77d6-a0c9-3023-87a8-44d95bd7b8d8.roa (raw, json)
Hash identifier:          F5dD7/GgFWtS3jtVOiaK04wgC57EYyyyBI35crHy8jk=
Subject key identifier:   7E:31:64:A7:FD:E7:A4:5A:79:9F:E2:9F:3F:EA:AF:9A:C5:69:91:99
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16E14B8BB3B641DFC5600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e0cb77d6-a0c9-3023-87a8-44d95bd7b8d8.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     20197
IP address blocks:        204.84.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6e:14:b8:bb:3b:64:1d:fc:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=2b625063-49f0-4e7e-8b11-539225a273f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b7:c5:83:59:47:ae:16:21:5b:cd:69:6b:26:
                    07:53:69:08:a3:86:c8:22:7a:b7:d9:78:fe:cb:1a:
                    ce:ab:f6:d6:91:c3:fe:2b:4a:20:6c:1a:25:f3:53:
                    25:85:c4:c1:12:8c:11:d3:df:2a:8c:c5:4d:bf:4e:
                    00:99:27:49:b5:13:59:76:a6:3b:61:46:77:03:21:
                    ef:7c:a6:b2:ac:85:6f:93:96:37:14:b6:74:d4:17:
                    e8:47:ab:dd:17:2a:40:13:af:32:e6:7c:5d:fa:7a:
                    39:2c:20:df:c5:b2:ff:76:68:60:4e:18:7a:ec:81:
                    d4:85:18:b9:f3:cb:cb:1b:06:6b:2c:a4:9f:b4:08:
                    0d:7c:68:cf:59:e5:37:30:1c:a8:2c:10:7f:0b:3b:
                    87:e8:c4:6c:40:d1:49:ae:c5:9c:e5:64:82:67:ee:
                    31:84:f2:0e:39:5d:8d:62:27:08:ef:09:5d:68:24:
                    10:97:5b:f6:0f:ee:d4:16:33:e9:32:0f:1a:d0:31:
                    92:be:16:52:ed:da:b2:e3:f3:68:50:10:ee:13:8b:
                    e4:53:c3:e2:dc:34:00:7f:bf:46:34:22:17:5e:12:
                    1a:fb:db:7f:a8:1b:d8:0b:1b:59:e8:ac:be:20:ef:
                    7b:97:8c:64:18:1e:e2:33:19:ad:f6:12:44:f3:bf:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:31:64:A7:FD:E7:A4:5A:79:9F:E2:9F:3F:EA:AF:9A:C5:69:91:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e0cb77d6-a0c9-3023-87a8-44d95bd7b8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:55:b6:e8:53:f4:e0:f9:53:d1:7e:44:6d:3a:1b:3d:aa:2b:
         fc:05:9a:7e:86:61:92:db:de:de:6c:f1:b3:59:20:f9:67:c3:
         ae:8e:03:cb:1c:1d:69:a9:9e:03:94:81:a7:8d:b6:65:bb:91:
         9b:c3:a7:af:8c:e6:31:18:4e:24:a2:d6:2d:45:2b:fc:27:ef:
         82:16:f5:52:26:c8:49:bd:0c:c6:96:c7:ec:89:4d:fe:8c:91:
         05:84:fc:60:c3:d8:73:f8:c1:6f:db:3b:52:3b:41:d1:7f:f8:
         a3:25:18:b6:53:30:c8:f0:a2:b7:f2:34:eb:1c:2a:b4:b7:09:
         6e:a3:5f:02:8b:7b:60:bf:6f:85:ee:aa:1b:73:0e:ee:39:1f:
         98:0d:f4:ef:26:be:f9:c0:01:7a:a1:23:19:0c:30:1a:2c:67:
         1a:bd:9c:55:47:26:49:06:88:9c:c7:7f:a9:b6:bb:ea:60:88:
         d8:42:76:b2:1d:1a:bc:61:46:24:c8:07:56:68:40:ea:48:0e:
         bf:33:3e:15:0c:7a:01:c6:3d:90:71:48:78:e6:63:bf:3b:bc:
         d4:b7:11:3a:dc:59:ec:e7:ab:40:2f:5f:ef:7b:08:ef:5b:5e:
         01:a2:ac:1d:e8:b7:7d:22:f4:63:d1:83:ef:e9:d9:45:14:10:
         58:94:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:30:56 2025 by rpki-client