Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/253376e1-3a06-3e6d-ba65-b228978d1a68.roa
File:                     253376e1-3a06-3e6d-ba65-b228978d1a68.roa (raw, json)
Hash identifier:          XAkLFywxKAs/nuFRSin6bG/sQ5b5hfl7VUHPfuDiOgo=
Subject key identifier:   FB:38:CE:BC:67:D6:41:DE:08:8A:33:9C:DC:61:87:7A:6F:6E:E1:56
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285849BC74B0CE4B1C145A2A4A17A0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/253376e1-3a06-3e6d-ba65-b228978d1a68.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     19901
IP address blocks:        143.103.208.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:b0:ce:4b:1c:14:5a:2a:4a:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=9c12b976-9319-4c1e-991b-cf8f2c57c842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:e1:fe:69:0c:b8:85:45:48:f0:84:04:76:
                    d7:d0:2c:29:33:db:46:be:31:38:b4:50:c7:b2:27:
                    1c:a4:22:1f:03:73:90:74:ad:05:2c:f2:a5:a4:87:
                    51:4b:fd:59:4e:3d:5c:66:c7:26:80:67:e9:cb:47:
                    9f:a4:f3:b8:6e:40:23:12:0d:56:c9:25:b8:c3:7a:
                    96:77:81:44:07:ae:25:71:df:7b:07:4c:58:8e:1b:
                    9c:a7:2b:57:1b:6c:41:a9:8e:c2:e9:9d:e4:9d:b9:
                    06:c6:e2:4d:e3:99:ea:8f:a6:6e:61:4a:cb:6c:3c:
                    97:26:d2:b2:fe:c5:66:5a:64:e3:8a:65:3d:b7:57:
                    37:88:68:9f:ec:bf:95:98:00:20:38:f2:bb:a3:fd:
                    f9:42:40:ee:8e:91:44:a7:de:34:bd:ac:16:a4:28:
                    b1:d9:4f:78:07:48:3a:ca:90:6f:e5:af:bc:b5:85:
                    e8:7c:7b:94:11:45:5b:d4:0f:9e:b5:99:f3:be:31:
                    07:1f:6b:74:ae:d4:ee:fe:78:22:9e:a6:01:8d:2b:
                    73:70:69:e7:8a:32:09:ac:84:1c:54:1d:fd:25:f9:
                    ff:e9:f7:21:2d:88:b3:a5:f2:0f:f5:00:e6:c5:36:
                    fe:9d:9f:65:8e:96:e6:3c:98:50:4b:49:d5:66:2d:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:CE:BC:67:D6:41:DE:08:8A:33:9C:DC:61:87:7A:6F:6E:E1:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/253376e1-3a06-3e6d-ba65-b228978d1a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:46:59:f7:0d:5e:fa:df:bb:eb:92:e0:e4:af:2c:81:75:4e:
         ff:6d:75:10:dc:38:7c:0c:6f:36:03:70:bc:8b:40:4d:37:e1:
         91:78:f0:94:ff:d2:10:2f:94:91:8c:e7:95:ea:d3:e8:75:a4:
         ee:5b:d5:4b:a8:d8:6a:bf:ba:a1:31:8a:d3:9a:bd:04:d6:74:
         f0:02:39:47:a7:d8:27:6a:85:ee:31:4c:76:ce:ff:f3:44:c7:
         77:1a:85:d5:e6:e9:32:87:60:85:a1:55:dd:cd:7e:c4:0c:0b:
         dc:78:91:72:3c:91:2d:85:59:e3:55:d3:61:e4:bf:af:6d:3c:
         80:0e:34:43:57:74:68:eb:da:5c:b3:17:0e:db:14:57:dc:5b:
         6a:d5:fa:e0:a0:8d:23:90:b1:cb:9c:cf:9b:d3:ed:46:48:c5:
         a9:d3:2a:fe:74:12:2b:86:54:65:04:83:e5:40:0c:d1:c3:ff:
         0f:e3:a3:a8:dc:7c:9c:17:0d:d1:28:c1:fd:a0:51:7a:a3:74:
         0e:95:7c:6f:99:2c:c6:47:b7:30:ad:cf:c6:14:90:7d:84:9f:
         3a:d6:57:6f:46:89:63:3a:f4:b2:a5:f8:47:a3:d4:f1:66:8e:
         a6:fc:f2:2a:38:cf:09:94:12:86:a6:cd:55:ea:99:0f:33:c2:
         ef:86:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:42 2025 by rpki-client