Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/64958442-b8ef-36f5-930e-f098a97dd0eb.roa
File:                     64958442-b8ef-36f5-930e-f098a97dd0eb.roa (raw, json)
Hash identifier:          iVqF2h9KQ/vpft/OoHkGIqEqMoooE0+mY07JoKkCJFs=
Subject key identifier:   76:39:51:C8:A2:04:01:E4:1C:71:4E:28:A2:93:AC:E8:BF:2F:06:B1
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F4328584A6290A1029F3256687A054B00
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/64958442-b8ef-36f5-930e-f098a97dd0eb.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.204.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a1:02:9f:32:56:68:7a:05:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=8bb4596b-0c3f-489e-b1c6-0913ffd77350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:34:3f:27:15:5a:85:8a:d0:67:cc:a3:08:
                    cd:c8:fc:a9:3e:6d:4f:d0:74:29:bc:c9:93:86:2c:
                    b5:07:ab:aa:3a:43:b4:67:5f:d0:21:c3:1a:78:3d:
                    74:62:5b:3d:29:04:ac:79:b6:d6:ee:fc:60:86:02:
                    a0:8d:74:e4:18:f5:ed:48:6b:91:f4:2b:15:3a:2b:
                    60:c9:82:e6:88:d7:b3:96:ad:94:d7:8b:2a:a7:16:
                    19:41:49:62:73:00:73:08:88:cc:a7:f1:b3:b2:1e:
                    1a:08:cb:53:98:10:02:07:fe:b4:ce:43:b4:e2:61:
                    c0:01:7e:5d:8b:e4:aa:53:f2:49:89:9b:a9:ec:ba:
                    6f:cf:03:2b:ff:65:cd:69:99:dd:b1:80:83:21:c0:
                    b9:ea:45:ba:2a:51:6e:10:c2:c3:d0:98:7f:f9:59:
                    c0:4b:62:8b:7a:61:dd:f0:39:a5:dd:56:2a:31:1a:
                    46:ae:94:83:b2:16:bc:f1:c0:4a:d5:e6:cb:dd:15:
                    9e:35:d0:a3:54:46:29:00:65:fc:3a:e1:7a:0f:02:
                    0f:64:ad:99:2a:d7:07:37:e7:63:cf:dc:e6:96:ee:
                    8b:14:67:38:c2:21:40:13:a8:80:37:39:42:7a:f8:
                    f7:d4:b2:a6:00:41:75:6b:8b:4f:3a:f3:c0:0d:7f:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:39:51:C8:A2:04:01:E4:1C:71:4E:28:A2:93:AC:E8:BF:2F:06:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/64958442-b8ef-36f5-930e-f098a97dd0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:2d:42:a3:a8:ed:2f:2c:96:14:51:8e:08:0b:f6:8b:0c:
         e3:20:d3:3c:c2:77:49:70:7f:2e:d2:ca:45:2a:8c:6e:65:a6:
         dc:ab:45:0c:d6:ba:78:79:b5:02:b8:a9:a9:b9:fe:0b:e8:00:
         dd:75:92:fd:be:c2:56:7d:1c:d7:d5:64:01:03:dd:f1:51:60:
         c6:47:0f:c7:29:43:e0:0f:7c:62:db:61:ac:a4:1f:03:ce:ae:
         52:65:21:e2:a5:97:a8:a4:db:f0:20:46:7d:2f:b4:18:56:e7:
         b0:6b:6f:73:e1:fb:d7:8d:91:e9:ac:62:ec:74:1e:fb:0d:fd:
         15:e2:50:4f:68:9f:1a:d5:0c:32:83:85:a8:36:27:97:4b:43:
         36:5e:c9:72:96:a7:da:05:f7:37:84:e4:5c:63:db:4f:e5:32:
         24:a5:ac:aa:8a:d2:4b:f1:f5:ac:c7:f1:e7:58:5a:f8:17:d9:
         4c:3c:22:89:a3:2d:63:ae:7c:91:49:cb:1f:e1:21:5e:42:8b:
         6e:71:dc:99:2f:ec:a2:bc:34:5a:24:99:e7:50:37:b7:4e:ab:
         e8:62:aa:80:4c:37:07:0d:83:96:e8:2b:f3:9a:fb:04:cb:a0:
         cd:8d:fc:d3:81:c1:ef:1e:d2:71:b2:6b:f4:c9:7c:2b:dc:0e:
         46:19:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:20:00 2025 by rpki-client