Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa
File:                     63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa (raw, json)
Hash identifier:          abFAftmGeF24OsNMr6kqDomzPCXGbbRUkZGUwA5EALU=
Subject key identifier:   A3:B5:2C:64:1C:0D:A5:B2:84:EC:F5:A4:BD:3C:B3:DE:0E:FA:28:85
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584A93EF8AFEB313743C355D5340
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa
Signing time:             Sun 20 Jul 2025 05:27:14 +0000
ROA not before:           Sun 20 Jul 2025 05:27:14 +0000
ROA not after:            Sat 18 Oct 2025 05:27:14 +0000
asID:                     20055
IP address blocks:        104.225.135.0/24 maxlen: 24
                          192.112.27.0/24 maxlen: 24
                          198.186.143.0/24 maxlen: 24
                          208.123.176.0/21 maxlen: 21
                          209.46.4.0/22 maxlen: 22
                          209.92.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:ef:8a:fe:b3:13:74:3c:35:5d:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Jul 20 05:27:14 2025 GMT
            Not After : Oct 18 05:27:14 2025 GMT
        Subject: CN=19dd8b06-8867-41cd-804c-9e64f9bf0a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:92:e4:37:da:2f:78:e1:5e:fb:e6:a8:67:
                    e8:e6:9d:fb:b0:b0:8f:3f:5b:1e:4a:8d:96:76:3b:
                    ef:59:a0:1c:9f:93:d5:55:ee:90:b6:25:07:6f:9f:
                    c8:a2:0c:01:71:f0:90:1f:78:1b:ca:88:c2:e4:96:
                    68:79:3e:01:eb:e2:fd:f7:fb:2a:7a:c2:83:6c:4e:
                    56:42:92:eb:78:33:44:ec:0e:47:46:55:32:ea:a0:
                    fb:57:4f:a1:c6:6e:a3:6d:44:3e:be:61:87:a5:28:
                    ea:d5:01:9e:b5:34:53:04:29:dc:d6:3e:d2:11:e5:
                    e7:53:b2:3d:12:7f:e5:d1:8f:cf:7f:10:e0:78:17:
                    a1:29:e9:77:ad:7f:36:e9:be:e6:b5:d9:ad:51:64:
                    ac:1a:41:48:d2:e8:61:87:c9:35:5c:a9:07:be:df:
                    8a:f8:46:ac:b7:c0:d3:9b:f5:74:04:cb:3c:1b:c9:
                    f9:a6:af:73:f4:1e:79:ec:e2:0d:5e:44:69:05:a1:
                    01:3d:bd:06:d0:0e:0b:d9:c5:02:86:c7:d2:af:98:
                    51:00:26:ab:dc:ff:d3:0b:18:36:64:a5:48:91:4d:
                    5c:12:3c:13:2d:03:2c:c8:4b:0b:2e:d0:ad:46:aa:
                    ea:fc:16:4a:90:95:9d:38:b7:4b:dc:9e:8a:23:12:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:2C:64:1C:0D:A5:B2:84:EC:F5:A4:BD:3C:B3:DE:0E:FA:28:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.135.0/24
                  192.112.27.0/24
                  198.186.143.0/24
                  208.123.176.0/21
                  209.46.4.0/22
                  209.92.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:77:f4:cf:e7:d2:f9:3b:29:0a:9a:53:c0:70:43:54:e0:f9:
         d9:18:3b:7e:1b:99:72:6e:64:79:02:90:97:6d:c5:0b:b2:85:
         2a:a8:99:8e:e5:52:f6:02:52:bf:06:0b:ae:fd:65:70:64:31:
         64:56:c3:12:9c:20:aa:b3:91:65:59:a5:32:04:e0:f7:d4:d3:
         8c:9b:96:51:02:29:f1:d7:8b:45:47:67:e8:61:e8:a8:ff:36:
         07:74:d3:53:95:6e:eb:01:39:12:70:46:46:cb:1f:d0:66:ed:
         62:d4:7b:13:1a:ff:73:99:a4:cd:2f:ab:36:86:c6:b5:a2:7e:
         a5:1b:82:2e:3f:b7:23:fb:18:3f:73:bb:57:81:83:5c:fd:2f:
         9a:1b:67:88:b0:f8:c8:77:8f:f1:d6:da:36:f4:eb:2c:6c:fe:
         a9:3e:34:3f:9f:dc:9e:d8:26:6e:f7:bb:5a:20:28:7e:8b:0e:
         bb:c5:a4:46:e9:15:30:51:a9:aa:8b:31:98:4f:68:43:51:9f:
         eb:a6:5e:28:64:43:7c:75:8c:4e:f3:27:e9:0b:96:9b:5c:68:
         f4:26:94:66:a3:43:39:89:80:d1:bd:0e:9b:2e:69:60:8f:e2:
         6b:4d:d0:6b:ab:7b:df:3e:ff:00:90:f2:23:86:88:d8:fa:72:
         4d:c1:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 15:55:02 2025 by rpki-client