Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
File:                     34c75caf-5f31-3ddf-b113-d584f51f166e.roa (raw, json)
Hash identifier:          YdeqcVJwsajT3mqiugQUT19T33u5THMCl+mw6r+7VWw=
Subject key identifier:   56:0F:1E:36:0F:04:0E:CD:9A:51:43:6E:FA:04:0F:FF:97:2E:F9:98
Certificate issuer:       /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial:       010D0C9F4328584AF9514823E8023FE44556CB80
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     8075
IP address blocks:        204.209.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:48:23:e8:02:3f:e4:45:56:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=8217bc86-f0cf-4978-bbe7-293b717e750a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:cd:7a:2e:ab:6d:94:9a:b5:31:fa:df:b6:
                    92:41:df:34:27:94:fd:ed:e2:f4:dd:6a:f5:57:af:
                    f1:2d:cb:e1:ab:5b:61:70:2f:af:c8:3f:80:a9:de:
                    35:9d:c5:30:09:98:2a:07:7f:7f:69:7d:47:81:fb:
                    4a:fd:ce:b2:cb:15:9a:1b:fe:70:65:02:54:cf:aa:
                    f8:d4:24:3a:47:a5:58:4c:7d:ea:5a:ce:bf:ee:59:
                    dc:d0:e3:72:9a:4a:1c:fc:83:fd:22:61:cc:25:a8:
                    a0:09:d0:f3:10:84:45:b4:d0:f1:aa:88:41:8f:f3:
                    78:15:4c:4a:3b:52:c0:b4:4c:15:8b:48:49:ac:e5:
                    fd:0f:2d:8e:11:9b:2c:8c:b0:b7:18:d8:9c:a6:81:
                    bf:9c:66:8f:ca:67:67:ff:d6:6d:d8:f0:84:8f:bf:
                    e6:4d:4f:9c:29:52:6f:61:2f:36:2d:42:05:ec:d7:
                    c3:bf:9a:78:e6:3c:6e:61:32:21:6a:45:06:b5:c9:
                    c5:da:b3:ab:91:4d:f7:c6:1c:a1:f2:4c:7b:f3:48:
                    54:11:58:9c:2e:85:65:af:3b:a6:af:99:7a:c6:87:
                    3f:ac:bd:5c:c2:00:55:81:57:8c:ae:a9:21:32:87:
                    c0:a5:49:d3:ed:27:78:2d:f6:cd:92:ac:36:51:08:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:1E:36:0F:04:0E:CD:9A:51:43:6E:FA:04:0F:FF:97:2E:F9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl

            X509v3 Authority Key Identifier:
                keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:86:4f:04:96:d8:b3:75:4b:25:24:05:4b:2b:69:c7:a5:
         b8:c6:59:f6:0c:06:ac:da:91:97:35:8c:ec:11:1d:95:0d:7b:
         65:7d:5d:80:2f:25:7a:df:a8:b0:fa:d1:4a:a5:90:62:9a:4a:
         e1:9d:ca:d3:36:70:3e:24:f7:ac:4b:ed:5e:19:da:62:ba:c1:
         5b:8d:6f:37:25:bb:de:cf:6c:ac:a8:c1:11:1e:0d:c2:ec:f4:
         38:c8:c5:27:1c:45:be:53:0d:2a:7f:3b:ea:97:71:90:17:53:
         87:02:2c:22:73:10:21:24:3c:89:8c:bf:4f:ab:03:ef:26:02:
         d2:82:43:1f:2a:58:46:ac:b8:ec:88:79:13:40:b0:c0:98:8f:
         b4:f3:a0:a3:83:7e:90:73:8d:99:2b:30:83:c6:89:93:b4:aa:
         b8:ff:03:79:dd:90:08:96:d9:48:d1:3d:8c:ad:5d:6f:01:0a:
         0d:35:c6:70:b9:67:50:bb:78:2c:8e:6c:ee:b9:e0:d1:c0:4f:
         f4:f4:57:5c:75:7e:d2:93:d6:0a:09:1e:24:62:2d:02:ef:b9:
         31:05:4f:27:1a:b6:51:1c:ed:54:85:8e:30:e1:52:5e:d4:94:
         ee:c8:66:08:6c:f4:05:dd:d8:90:4f:92:a7:bf:6b:23:0d:aa:
         20:b4:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 23:54:23 2025 by rpki-client