Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
File:                     6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json)
Hash identifier:          TtUlJKkpemfg/COn9WC8nZ7LPuZmdkpRpA0Pnsb8SRk=
Subject key identifier:   43:B3:B0:45:86:69:8E:C0:6B:ED:7F:2B:09:32:B3:B5:B3:B7:FB:A0
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285849D42FADB1BDFF21080C5D9FC0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     18914
IP address blocks:        204.8.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ad:b1:bd:ff:21:08:0c:5d:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9c864b62-ada9-4ce6-8287-bd3ff0844c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:41:f1:7f:36:d0:df:e0:77:31:72:70:92:
                    85:0d:65:a7:5d:0f:d9:7d:9d:ff:36:18:79:fe:94:
                    72:cc:ef:57:b9:9c:d8:b0:04:99:8e:d4:df:dd:c6:
                    c6:fa:d4:81:5d:fe:a0:37:0a:ca:95:60:3d:fa:16:
                    1c:86:27:3a:d3:22:a1:ea:9b:8d:9b:41:4e:5e:8b:
                    c0:f2:f6:ed:6d:8d:e3:d6:bd:6b:67:38:c5:fe:a7:
                    cf:ef:34:d7:cc:f7:05:0e:c7:21:36:a2:01:db:32:
                    6f:95:a2:fc:79:6b:8f:08:61:de:57:71:4a:bb:de:
                    59:ae:e5:68:ad:2e:8a:35:f4:68:07:e8:67:18:b9:
                    2d:08:27:15:c3:25:d9:69:d9:75:5f:43:00:31:6e:
                    c7:8f:94:d5:7f:6f:fc:53:98:3d:fb:4e:4b:9c:8d:
                    d7:fc:e7:c8:66:08:72:2e:f9:13:04:5e:4d:fa:1c:
                    2b:d3:8d:eb:25:a0:94:1c:c0:2b:12:e7:df:7e:94:
                    2b:6f:c5:7d:75:c9:34:6a:3b:9d:4e:ab:de:51:5c:
                    88:27:8b:0f:48:ba:11:28:bb:4d:22:a1:9f:cf:02:
                    21:1a:e6:aa:12:aa:51:7e:71:8d:bc:61:6b:6e:26:
                    d3:cf:79:a4:fd:5e:94:df:57:20:7f:b3:47:a7:28:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B3:B0:45:86:69:8E:C0:6B:ED:7F:2B:09:32:B3:B5:B3:B7:FB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:94:ff:a0:75:70:20:48:b6:b8:01:8e:86:c0:b4:8c:ee:
         5b:a6:85:24:bb:26:17:9b:4f:7f:25:9b:68:bd:96:c2:be:df:
         af:aa:ec:94:1b:14:a9:bd:26:1c:6d:2b:08:59:c1:0d:7c:78:
         cd:d3:ea:74:3a:a3:9d:a1:04:f3:84:1e:70:09:ab:44:74:b9:
         ef:1c:38:ea:8d:3b:c8:74:0e:a4:41:20:ea:ca:b6:14:4a:2a:
         38:7c:7b:e5:8f:ce:86:b1:91:9b:5e:c3:77:d4:9e:fe:9c:8d:
         78:cc:c5:58:70:7f:2d:2e:d1:77:aa:a3:cc:a4:ad:4c:01:72:
         16:90:70:8d:96:84:61:a5:4a:54:43:c7:0f:13:5b:4b:ad:42:
         88:61:da:5e:50:fe:ab:0d:01:72:46:87:4c:ea:b0:2c:0a:de:
         94:df:1b:70:30:e1:8c:e2:df:af:d0:09:ff:43:15:8f:0a:91:
         38:32:76:22:c8:54:70:0d:8c:1d:d3:3f:6c:2a:6a:bc:40:79:
         45:71:e9:1b:e3:f1:73:4d:f6:4d:66:b9:e8:0f:43:4a:8e:03:
         83:0b:88:73:b3:42:c3:1c:c1:21:20:68:d2:3f:93:77:63:9b:
         41:70:93:6a:fa:b6:1e:41:55:49:3f:4a:c3:7f:21:ed:94:46:
         25:75:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:11 2025 by rpki-client