Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3812fa50-233f-3c61-8c70-b3cb1ac91fe8.roa
File:                     3812fa50-233f-3c61-8c70-b3cb1ac91fe8.roa (raw, json)
Hash identifier:          P1fEj/flbFwkP9Hy1k0Mm1to9SCbX9NtRipbI4BPf6g=
Subject key identifier:   6C:B4:58:5B:31:3E:A7:CE:75:17:81:5D:9D:67:5D:B3:0B:17:46:15
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849ED5B75C4C533F03D900B7580
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3812fa50-233f-3c61-8c70-b3cb1ac91fe8.roa
Signing time:             Wed 21 May 2025 13:24:41 +0000
ROA not before:           Wed 21 May 2025 13:24:41 +0000
ROA not after:            Tue 19 Aug 2025 13:24:41 +0000
asID:                     3257
IP address blocks:        173.232.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:5b:75:c4:c5:33:f0:3d:90:0b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 21 13:24:41 2025 GMT
            Not After : Aug 19 13:24:41 2025 GMT
        Subject: CN=16ad4e68-cbc9-4238-99c8-f7b70b87837d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:09:2c:12:cf:d4:60:ae:57:32:f9:fb:ac:
                    70:46:45:21:ea:d3:b5:d3:04:5f:bc:d0:08:4b:6b:
                    5a:08:0a:61:7e:3d:68:56:ef:a9:f3:bd:fa:b4:92:
                    ec:c8:04:24:f8:41:d0:18:12:11:7a:a8:9d:ed:59:
                    f9:bc:2d:7b:15:69:aa:ea:39:65:3b:37:36:43:a1:
                    47:db:06:03:1a:d5:e6:8f:39:d8:fb:24:6b:88:79:
                    8a:dc:63:9a:c2:ce:9d:cd:db:26:67:b5:7f:91:a7:
                    08:6a:c8:2b:c1:d7:05:45:55:f7:52:f4:cf:97:e8:
                    20:70:55:66:fd:fd:7c:3c:88:ae:14:1c:ab:79:d0:
                    60:e5:c2:ba:ee:0f:5a:69:f5:de:27:b3:3a:f1:6a:
                    a9:85:37:1a:47:a1:4c:29:3f:f4:3c:b8:65:cc:05:
                    68:8e:68:22:28:d0:e8:a9:45:36:31:00:27:9b:09:
                    24:88:de:a0:13:34:27:42:6b:ec:f9:69:4a:65:98:
                    71:0a:6a:7b:25:e3:ce:c4:26:db:15:fa:93:2e:82:
                    de:76:73:ee:e7:13:4e:5c:3e:1c:a0:b0:14:6c:96:
                    12:f7:12:81:fa:ba:20:79:83:e4:1c:24:59:22:32:
                    f5:56:e5:ae:0b:6b:51:95:bd:0a:b6:c1:f7:a4:58:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B4:58:5B:31:3E:A7:CE:75:17:81:5D:9D:67:5D:B3:0B:17:46:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3812fa50-233f-3c61-8c70-b3cb1ac91fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:e9:d6:f7:4d:97:c6:b3:40:5e:27:76:cc:81:f0:c9:63:
         4e:1c:97:78:00:e1:c7:fd:df:74:26:8f:45:ce:05:2b:93:c7:
         c8:b1:ee:4a:2e:86:ea:52:cd:60:31:77:c6:92:1f:46:09:05:
         d9:41:fd:32:c4:21:3f:b9:d7:4c:9f:12:c7:ee:a0:91:65:7b:
         e9:1d:7e:d7:93:85:96:05:bf:fa:1a:02:43:ba:77:2e:a3:2d:
         97:ed:eb:e7:f9:cc:8c:30:25:e6:7e:05:7e:47:cf:4e:db:18:
         d2:be:ef:98:dc:fe:3b:f0:f5:3a:a3:93:ff:90:e2:ca:21:e3:
         48:93:02:7b:90:53:97:cf:1c:97:54:38:ea:b4:0a:10:bd:1d:
         2c:b1:8e:98:eb:6b:be:42:cd:b2:b9:a4:30:7a:0e:05:94:d3:
         e9:ff:77:d1:76:b0:75:2e:7f:3f:5a:94:84:5f:81:e7:ef:70:
         c8:b0:9e:97:5d:20:70:c2:48:2b:5e:9c:f1:5d:40:f1:4c:5f:
         8a:c6:f2:b4:f5:c3:49:72:fd:d3:93:d4:92:60:ff:33:91:e0:
         2f:c5:77:06:7f:7e:4e:47:3e:07:8d:23:8e:3a:bc:22:2b:01:
         df:36:be:b9:a5:0f:74:20:bb:11:c3:d8:52:a3:30:a8:ee:01:
         9f:68:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:04:21 2025 by rpki-client