Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa
File:                     60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa (raw, json)
Hash identifier:          /j01JGDqxuzwwrt2Kfej8YNPgUbur7js9FMLCWZpTF4=
Subject key identifier:   97:DA:43:A5:C7:71:25:96:F1:41:6C:A1:5F:79:01:EE:D1:30:8D:3F
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328584A4C3B10060D30CE434F126BA0
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     15038
IP address blocks:        204.9.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:10:06:0d:30:ce:43:4f:12:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=124e7ed8-2831-4254-848f-80157755d6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:a7:b1:f3:81:07:bb:ee:8d:86:56:7e:8b:
                    77:b0:c8:47:d5:03:8a:97:d2:cd:0c:bf:57:10:82:
                    b0:8e:e4:c6:30:40:ec:c8:b2:44:7f:74:a6:28:29:
                    c2:42:fe:e0:62:d1:dc:6c:74:c2:45:c1:1f:e4:25:
                    5d:5a:7d:97:98:c2:48:e3:e9:93:e1:e5:64:fa:ba:
                    8f:1a:ee:32:c6:98:00:3d:07:69:77:f6:22:e8:f4:
                    45:b5:93:2a:31:c4:69:97:5f:71:89:06:cf:d4:61:
                    6b:16:4e:14:ac:19:d6:ea:15:6b:bf:b0:c7:ab:22:
                    23:00:5d:78:18:27:a5:96:01:e1:ff:51:88:7a:80:
                    7d:27:a1:43:1b:1c:a6:5a:08:89:7c:fe:d5:e8:4b:
                    f8:ac:e4:ac:a8:70:26:bf:c9:90:bd:de:f3:05:71:
                    e8:c6:01:47:9d:79:82:a5:24:8b:1f:1a:7c:cd:2c:
                    af:65:ad:46:0c:5e:11:d9:b6:ce:9d:69:9d:57:70:
                    63:3b:3d:25:4a:f0:10:2f:33:4e:6a:e6:57:b5:ca:
                    cc:62:ba:9a:99:67:ee:77:d5:db:58:96:5a:27:fb:
                    e7:d4:5f:77:55:ae:bc:6c:99:c1:4d:54:92:97:2e:
                    fd:ac:08:94:44:22:84:9c:b3:8f:98:0b:ef:48:c7:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:43:A5:C7:71:25:96:F1:41:6C:A1:5F:79:01:EE:D1:30:8D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:92:cb:ee:e1:d5:04:f0:c0:4d:be:df:6d:d6:b0:f5:07:
         60:a8:d9:cb:ee:69:f6:c4:b3:9c:d0:d8:85:6f:64:a5:3b:1b:
         c0:57:44:05:c5:9e:ea:6d:60:ec:8d:6f:15:38:c4:8c:60:e0:
         74:f6:c4:09:d8:43:1b:a0:c1:16:c2:4a:2b:87:b6:da:e0:26:
         42:c7:ff:ef:f0:9b:5b:5e:9e:e0:c6:aa:b1:d2:65:4c:b0:cb:
         b5:56:38:17:92:ef:8c:41:87:9b:44:e4:28:66:f9:95:c9:18:
         2e:53:9d:ad:3e:de:db:79:6e:cc:90:35:ef:48:b6:e3:d9:7a:
         19:1e:2a:b6:02:e3:0e:59:bf:01:8a:99:3b:7c:88:4f:78:ae:
         ad:1f:fb:66:e5:ce:f0:d6:1d:57:1d:f3:ad:3e:fb:33:98:59:
         ee:c6:fe:c7:cd:28:73:4f:a2:48:45:7a:ff:c4:eb:a7:82:96:
         bd:c4:1f:35:2d:2e:59:3e:ff:64:61:d3:b2:f4:72:f6:c7:12:
         ba:6d:37:e6:e4:79:3c:51:e7:b8:4c:35:bf:2d:60:b8:24:51:
         6d:71:78:2b:c1:f0:f7:55:56:61:25:60:85:ca:44:56:db:bd:
         88:8d:7d:73:83:ae:89:e4:24:b1:3e:c6:74:e7:66:5c:49:64:
         ac:f4:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:41:50 2025 by rpki-client