Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa
File:                     02b155af-a5ea-3439-823e-69a59b8f01a8.roa (raw, json)
Hash identifier:          iUhEiFHHwZ4WbQ92Kae6ZGfYjDIO+UucskPmzMIm/hs=
Subject key identifier:   9E:44:94:FC:3F:9A:69:33:32:A0:FD:46:80:F6:BA:84:3C:B7:DD:53
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F4328584A6290A0F25DD3C134823A0880
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        198.204.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a0:f2:5d:d3:c1:34:82:3a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=632fd696-6588-431f-a7f6-98e6f12e73f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:99:1d:47:bf:86:f7:92:40:20:40:bb:f7:c2:
                    af:d2:a4:41:dd:eb:e7:64:ea:60:a5:cf:4c:6d:49:
                    73:bc:ed:df:c1:4c:2b:f2:27:bb:40:79:47:8f:26:
                    6b:a1:3e:2a:1b:9b:5c:1d:4a:c1:c5:93:5b:3b:56:
                    5c:9f:e5:b3:9a:bc:25:f6:c1:b8:62:c8:53:86:2c:
                    c5:a6:9d:06:ce:ae:47:66:d3:56:d0:a1:dd:32:c9:
                    ec:38:62:ea:cf:0a:05:21:bf:85:10:9c:b6:c4:cd:
                    9d:c9:29:a6:52:e0:1e:b8:92:dd:fd:3e:d0:e1:f0:
                    bd:05:63:60:26:c8:45:8e:59:f6:d9:c3:3d:0e:de:
                    0c:6e:26:11:f9:54:95:68:e8:30:7c:60:da:cc:9b:
                    54:c2:31:bd:e9:0a:f4:53:d3:5e:84:e2:3a:a8:39:
                    a6:20:1b:c9:b3:bf:04:40:74:ea:ed:ff:6d:38:65:
                    8d:bd:3d:70:d4:80:16:2a:2c:f8:74:35:3e:df:78:
                    76:a0:a1:a5:a9:2d:f3:5e:59:0b:fc:7a:21:76:91:
                    24:08:03:31:5a:87:87:fe:7c:40:b4:87:dd:b8:1e:
                    a6:8f:7b:a0:9f:9e:9f:8c:59:ed:0d:16:db:59:6e:
                    fb:d1:b8:10:3e:a0:8c:45:d8:7d:03:7a:99:c8:4c:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:44:94:FC:3F:9A:69:33:32:A0:FD:46:80:F6:BA:84:3C:B7:DD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:da:16:fc:13:41:1a:d0:67:5e:3a:1b:74:3a:c7:96:aa:d1:
         a7:03:68:21:ef:7d:92:86:bf:74:a2:a3:e5:d8:29:91:2d:fe:
         65:86:73:a6:50:7d:45:06:a0:f5:87:73:6e:62:1d:39:d7:ea:
         b5:c7:35:4f:04:96:01:33:89:66:81:4d:94:84:a4:f6:b3:21:
         c7:5c:b4:44:e6:43:aa:68:ef:31:2a:42:3b:68:78:39:62:f4:
         f0:cb:fe:27:52:cb:a2:6c:2a:00:32:8a:38:81:56:07:4f:d6:
         8e:85:29:b7:c1:60:55:00:8d:a3:67:9b:40:9f:ea:6c:26:22:
         16:39:84:06:80:22:d0:3b:57:27:bf:5d:e1:8f:50:0d:45:cb:
         a4:15:24:50:bd:17:08:1b:38:e2:e3:00:e0:7e:28:5f:c2:e5:
         65:29:51:ce:91:62:86:cf:bc:5f:14:df:96:48:ab:e4:9c:7d:
         e7:3a:f1:9e:bb:70:29:d0:3b:ee:37:c7:1d:cd:76:e4:a4:78:
         55:0f:8c:2c:56:0f:d2:af:1e:1f:9e:96:7a:c7:71:3c:8f:dc:
         be:73:c9:0c:17:29:cf:02:3d:26:74:85:e7:0a:10:b1:80:21:
         02:c8:d9:5a:f4:52:0f:d9:3a:d1:14:fd:70:23:98:d1:f1:de:
         55:0e:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:30:45 2025 by rpki-client