Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
File:                     c753282b-6491-33e8-a0e1-bab307a0dd28.roa (raw, json)
Hash identifier:          +nMY60z1qvtPv6tVulr927ingOeKZZFEBhznsBetFyo=
Subject key identifier:   FC:F7:D7:CB:8D:A3:5B:25:E7:0B:B7:A3:77:D9:C7:DA:6D:65:EF:9C
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584A71EB2C1DAF3AD1C347624DB0
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     7018
IP address blocks:        139.125.0.0/16 maxlen: 16
                          192.205.31.0/24 maxlen: 24
                          192.205.32.0/22 maxlen: 22
                          192.205.36.0/23 maxlen: 23
                          199.178.180.0/24 maxlen: 24
                          204.159.108.0/22 maxlen: 22
                          206.141.192.0/24 maxlen: 24
                          206.141.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:2c:1d:af:3a:d1:c3:47:62:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=a63ccc59-1f2e-474e-9e54-b687df882132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:f8:5e:21:8a:6c:6f:d9:fa:db:22:1e:86:
                    b6:1d:fc:95:84:23:2c:16:89:71:2f:2a:9d:9a:89:
                    04:b4:36:e7:01:1c:48:ae:87:2e:06:38:cc:6b:9c:
                    53:a5:c8:80:86:c9:4f:32:e1:ce:6a:47:fc:d7:3b:
                    ea:37:7e:c2:79:6f:41:e9:46:b0:0f:3a:38:75:1c:
                    69:00:48:26:cc:4b:9c:07:ce:63:e1:f4:c4:90:a4:
                    1e:c3:57:aa:c4:05:00:48:9f:3d:2a:f2:0b:14:41:
                    20:9d:d4:2d:80:6a:3d:12:58:30:15:6c:cd:dc:7b:
                    0d:de:e7:aa:b2:46:ea:ba:1b:f8:a3:49:25:14:b0:
                    76:00:22:7f:63:90:33:f4:11:a7:8e:49:da:59:fb:
                    6d:6a:92:4d:3a:91:47:47:1c:44:35:26:1b:30:d5:
                    aa:1a:20:81:a7:8d:e2:9b:7a:e8:b6:a7:2a:96:31:
                    eb:34:58:c6:3a:63:4c:06:88:7c:f1:e0:6c:c3:fd:
                    ec:6e:95:92:26:4b:69:b9:a6:9c:c5:d6:b9:a2:b3:
                    bc:aa:94:b1:5e:5e:ac:9a:9a:5e:87:8f:ea:97:86:
                    7d:f6:2f:b6:50:ae:ab:d2:e8:b3:9b:06:13:6c:b0:
                    a5:13:c9:49:46:3f:1e:34:68:e1:17:08:03:25:25:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:D7:CB:8D:A3:5B:25:E7:0B:B7:A3:77:D9:C7:DA:6D:65:EF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.125.0.0/16
                  192.205.31.0-192.205.37.255
                  199.178.180.0/24
                  204.159.108.0/22
                  206.141.192.0/24
                  206.141.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:30:95:ea:cf:fb:59:eb:e8:c7:c5:0b:7a:43:dd:b8:47:
         d3:44:ac:01:46:32:bb:e3:e6:e0:73:83:d2:ef:ac:55:f7:db:
         54:f5:ff:4b:52:47:69:4f:e7:e5:c1:09:05:80:39:69:ff:d6:
         21:39:8c:38:71:eb:7b:3c:54:d5:bf:45:46:44:40:bb:46:09:
         26:9f:89:ef:8a:6c:17:07:bd:ea:dd:b1:3e:64:93:0b:75:37:
         b7:2e:ca:9f:0f:ed:88:d3:33:86:8d:a1:50:49:c7:b7:5b:77:
         3a:01:2f:85:8c:cd:f0:4c:4e:4e:f6:7b:84:fb:de:ff:17:ee:
         dd:50:0d:63:98:3a:18:2a:15:1a:d6:8b:75:08:bf:59:a5:3d:
         f1:a5:47:19:2d:68:c8:9a:48:21:1e:98:b5:f1:64:64:bb:8c:
         e4:02:23:6c:25:ec:1e:f6:66:19:fe:6e:9e:29:34:60:dd:f0:
         31:94:2c:a9:09:0a:ca:28:af:03:67:45:61:5b:82:ab:de:78:
         ab:00:71:60:33:63:02:a6:4f:90:67:cf:82:04:74:47:bf:d0:
         ca:fc:a1:9e:60:d7:97:09:16:40:dc:4e:56:ba:b3:d7:1b:76:
         9c:78:c3:1b:13:34:e5:89:d7:1d:8d:28:e1:3d:d6:b9:cc:32:
         07:fd:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:39:40 2025 by rpki-client