Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa
File:                     650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa (raw, json)
Hash identifier:          vUA4YoCawEbqfqsTsckovmUDurVkPms5Ta9gDmSFvuk=
Subject key identifier:   33:44:B7:01:01:D3:BC:05:8B:45:DF:1F:7E:5F:BA:70:F2:EB:D2:71
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584AC9DB9CE81DE73E5814475F40
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        209.169.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9c:e8:1d:e7:3e:58:14:47:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=7294ddf3-d71e-4c50-9c24-f23a1362839c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:82:08:e4:c8:47:de:57:61:81:7f:12:60:
                    00:e8:16:0d:7d:b1:97:a8:f2:ad:b4:0a:5f:08:27:
                    8a:65:f7:a4:ef:7b:2b:37:9a:87:bc:9e:3d:bd:0d:
                    18:49:11:ce:10:1f:2f:0b:d5:22:1f:cf:41:9c:8c:
                    53:a9:5d:9b:e6:a6:1f:2a:5a:af:64:6e:2d:6f:dc:
                    a5:d9:81:32:e1:bb:a6:17:9f:b0:da:e4:46:37:ec:
                    ff:3b:2e:ae:9f:19:ed:1f:8a:b2:c1:e6:fa:c4:80:
                    5e:e9:59:e2:bb:7b:b7:bd:5e:8d:83:d0:46:88:1e:
                    ec:69:c6:d5:e5:a5:33:be:0f:53:06:20:7f:ab:f1:
                    56:59:b4:0a:1b:62:5e:75:a4:38:1a:83:83:1a:31:
                    1d:b0:f7:0f:27:a6:57:b8:5d:ae:58:09:46:fd:38:
                    00:8e:b9:16:07:d0:b2:2f:33:79:98:33:d4:e9:ec:
                    e6:4f:4b:95:d6:0e:5f:f1:51:d2:93:86:c4:94:f6:
                    e0:9c:bb:2b:59:00:97:74:52:11:22:89:33:33:c1:
                    bf:d7:2f:4e:40:6a:13:7d:fb:de:0c:b8:c2:21:6f:
                    66:7a:84:4f:20:a5:53:cf:41:81:99:69:fa:a6:6c:
                    65:e0:2f:5d:3d:69:f4:39:e9:ff:e9:cc:11:57:84:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:44:B7:01:01:D3:BC:05:8B:45:DF:1F:7E:5F:BA:70:F2:EB:D2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:72:0d:f6:54:b9:15:68:44:d2:05:94:1e:21:f4:87:19:4a:
         23:7a:4e:02:8a:c3:20:d2:72:05:b0:c0:4a:42:0f:1a:34:41:
         6f:93:49:65:31:bb:9b:18:2c:98:a0:e4:a2:93:b2:cb:d1:37:
         65:b3:a1:90:cc:2d:86:67:ed:39:ba:04:5f:9b:20:58:e6:ba:
         23:34:54:ce:14:c5:50:18:16:87:4d:71:cd:94:06:a9:3e:f0:
         e1:1a:0b:26:8d:f0:c5:7e:c4:dc:87:e5:53:d2:27:01:b5:29:
         79:d4:b9:cd:56:4e:01:74:55:96:45:ec:e2:95:fa:33:e8:f9:
         40:8f:6e:88:98:71:e8:9c:ad:53:cf:14:7d:09:24:96:da:91:
         cc:91:73:f6:37:23:34:c5:5e:9b:aa:6c:9a:d7:fc:14:ad:69:
         0b:7c:88:f7:35:26:17:93:fe:fb:1e:1f:fd:b5:41:3e:bb:a4:
         f9:50:e5:f4:a5:35:85:4d:47:34:58:6e:80:e3:a0:97:83:26:
         2f:4c:cb:a4:9b:d2:8f:b6:a3:a3:0c:8a:af:1c:6a:72:aa:ce:
         92:9e:c7:40:30:67:57:13:b9:b4:47:82:51:75:ac:cf:a1:91:
         a6:d1:13:eb:76:94:26:d6:7c:c9:df:ee:66:5c:0b:3a:a2:1a:
         bb:87:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:12:59 2025 by rpki-client