Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
File:                     02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa (raw, json)
Hash identifier:          mnsypE/jnu6E1fTuRluYfOyjfte1SthliQyClrzhv7E=
Subject key identifier:   0F:C9:4C:EE:00:FB:37:34:3C:94:18:21:C5:F6:55:5A:65:57:59:1E
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849D1650BFAD8E48614C0C7FE80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     2734
IP address blocks:        208.84.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0b:fa:d8:e4:86:14:c0:c7:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=2e1c726c-ad7b-44f2-b7f4-2a820c43200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:4f:39:7a:c1:f3:e7:57:0f:39:81:29:b4:
                    45:cc:3c:77:a1:ba:d3:2d:a0:41:b8:7e:f3:45:23:
                    bb:2a:e3:05:3f:6f:53:f3:42:71:3b:7b:1c:63:f2:
                    f6:6a:5d:48:9f:0a:81:42:5d:9c:01:20:4a:70:fc:
                    1d:c5:c6:08:0f:c1:e6:99:69:8b:ad:48:28:a4:5e:
                    b5:ec:89:84:d4:3b:32:ff:a6:00:d6:7b:07:8b:4a:
                    d4:30:45:9c:1e:2c:e8:b3:6e:6d:7f:11:8f:b3:86:
                    3b:8b:43:d0:fa:02:e3:0d:40:ab:07:51:d3:11:97:
                    da:98:0f:2b:47:8d:9f:fb:d8:8a:ca:d0:c1:78:dc:
                    3c:e3:b8:ec:4e:86:37:32:0d:cd:60:df:f2:70:2d:
                    38:3e:b1:3d:af:3a:b0:60:59:74:d8:e2:f7:d0:6d:
                    ba:f3:5b:4c:2c:8a:ac:cb:ba:f4:e7:51:02:71:fb:
                    40:71:43:53:af:a2:58:21:9d:7f:c2:63:60:33:8d:
                    e9:65:a1:10:33:4e:8d:2c:8e:91:94:89:6a:3b:c8:
                    07:06:6e:b5:24:dd:3e:e3:6e:f5:a3:aa:e2:b1:3d:
                    38:13:fb:a9:17:67:ef:52:e6:64:9b:0a:a5:27:9d:
                    1e:a4:e0:e6:05:f7:47:22:56:cd:72:45:40:08:37:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C9:4C:EE:00:FB:37:34:3C:94:18:21:C5:F6:55:5A:65:57:59:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:40:bf:35:86:b5:90:74:59:cc:c1:9d:4c:1b:ab:61:9f:
         0f:d6:3d:ba:83:4f:28:18:1e:03:f8:ee:1a:e0:d5:fc:1a:9c:
         30:52:db:2a:06:df:fa:1b:7e:be:91:e2:b5:74:07:9b:07:47:
         62:14:ec:67:76:d3:db:3c:ba:c6:21:07:a7:dc:31:01:fb:8a:
         30:e9:5d:8e:44:9c:d4:10:67:b6:6e:1a:03:cf:df:c7:06:c1:
         65:85:7f:6b:4f:25:87:f0:cf:e1:cb:da:bf:e2:7c:72:81:f5:
         7d:49:a6:01:45:29:f6:41:16:6b:02:d2:c5:d6:bb:d7:a1:cd:
         53:d0:cb:0c:e1:6b:cd:56:a3:02:5b:e1:3d:80:6c:0f:cb:61:
         09:cc:7e:15:e4:db:c9:59:e1:35:4e:27:73:91:a4:ff:02:96:
         2b:d8:6d:97:aa:e7:a7:05:77:33:6f:97:29:b9:6c:9e:c8:86:
         6a:05:d5:ec:6b:50:fc:a0:84:e0:83:c2:b4:60:a4:ac:30:5b:
         92:b4:bd:80:1b:38:95:35:35:0b:93:40:a3:60:7d:ae:e6:5a:
         65:b0:cd:40:ef:e4:c3:11:cf:2f:81:21:d2:9b:3c:77:cc:cf:
         68:ee:53:45:4c:ce:24:47:ff:cc:7e:69:22:94:b7:e6:f6:e6:
         1f:1d:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:14:14 2025 by rpki-client