Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa
File:                     c839d4eb-7aad-3290-9927-1223b842368b.roa (raw, json)
Hash identifier:          pvrRQm1u/L7xjo904dJpetLRaK6dqjOj1FkUu4Y0R0c=
Subject key identifier:   64:86:6F:7D:CF:E7:BC:A6:31:8E:E5:99:59:33:56:10:C4:C2:91:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B189286E417343FDBA500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        208.217.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:18:92:86:e4:17:34:3f:db:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=7743b9ab-4810-4e72-b2bd-2a51af8128f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:c9:cc:c1:83:7b:fd:90:1e:fd:72:71:73:
                    08:24:ac:af:22:b0:e1:04:7d:00:7e:3d:54:ae:b9:
                    5c:c2:a6:dc:6d:37:b0:48:57:d6:8b:76:37:b0:60:
                    1f:fe:02:be:e3:1c:0b:9d:00:12:84:51:64:f0:d9:
                    fc:8d:c1:08:3e:4f:af:5d:46:9d:e3:cd:06:6f:41:
                    c7:49:22:b6:d0:df:4b:d5:70:50:1b:df:1f:a4:6c:
                    bc:15:a1:94:04:88:4e:4f:b3:38:e7:34:23:97:ce:
                    65:dd:59:7d:5e:45:f1:ea:a0:4c:1c:9f:a2:74:dc:
                    77:c1:fb:9e:60:53:56:53:6b:53:5a:55:a4:91:98:
                    33:f1:fb:d5:5c:c5:17:55:f9:e0:fc:18:00:4f:7f:
                    5a:88:3b:13:c3:33:61:3b:1e:ff:82:fe:59:6e:9c:
                    b1:ae:8c:56:61:08:4d:8e:7e:6d:2d:d2:43:15:03:
                    82:ec:dc:72:61:15:81:84:2d:eb:a0:24:84:d1:b7:
                    2b:16:dc:e5:c1:d9:84:ce:a7:87:68:2e:75:b6:c6:
                    40:72:61:a5:59:2d:da:79:14:a6:ef:db:1b:fd:37:
                    f4:f6:07:36:13:d6:8a:f6:80:da:92:3e:89:d9:fc:
                    5a:5c:e9:53:e7:8a:b0:e8:57:e4:a9:6f:fe:04:a2:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:6F:7D:CF:E7:BC:A6:31:8E:E5:99:59:33:56:10:C4:C2:91:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.217.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:ff:db:0d:8e:0f:48:60:00:a9:20:93:48:f2:8a:07:9d:
         92:96:33:6f:f7:7a:e0:a0:42:fe:37:7a:ea:3a:36:13:7c:bf:
         43:fb:d3:3f:62:fc:b0:11:ca:be:f5:6f:41:ef:32:df:8a:18:
         6c:a8:b6:77:c3:11:62:30:df:e9:e5:88:ac:28:8c:db:95:c1:
         54:e8:fb:c6:d1:e2:8c:53:ef:2d:9b:ea:84:1f:7a:db:de:02:
         26:09:76:3d:77:0b:c8:4b:35:64:2b:bc:e8:bd:9e:c2:81:73:
         c6:17:13:7b:b9:c8:62:1a:cb:a5:89:4d:87:97:e9:35:99:f0:
         37:b6:55:4a:8d:e3:9d:5c:50:98:a3:85:b7:44:fb:d6:ee:df:
         ca:7e:44:c5:e5:87:71:71:be:5f:d5:b3:ac:84:60:30:6f:76:
         c8:ef:56:b9:a6:18:2c:a0:21:b7:2e:18:bd:09:96:a6:a0:e8:
         c2:3a:57:0f:34:1a:b1:6f:67:5f:17:a4:93:0c:40:e1:12:79:
         c8:44:f4:24:8d:1e:f5:d5:83:9b:cd:23:28:c3:4c:43:96:aa:
         1d:f3:79:01:6c:36:d0:13:9f:4b:4a:17:e3:f4:56:76:d0:6a:
         f2:dd:8f:d2:7e:9b:aa:7d:73:60:6d:77:df:08:98:bd:01:80:
         16:85:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:33:37 2025 by rpki-client