Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa
File:                     05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa (raw, json)
Hash identifier:          8g8fLYveNic3DiQUx+iCJcL80ymqtjpZ0RsuflnhP4g=
Subject key identifier:   16:DA:D3:A4:7D:CB:9C:C2:29:EC:04:0B:B6:2B:56:13:67:59:94:78
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F4328584A1B5FF3945B014D80DF6ADD00
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     55039
IP address blocks:        136.242.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f3:94:5b:01:4d:80:df:6a:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=e0776994-dad8-40ef-96aa-7b9dc5aae988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:c8:c0:e8:75:cb:2d:22:e9:7f:77:23:14:
                    f0:8b:23:96:e2:72:6e:53:db:a9:70:d0:16:bc:32:
                    1b:9f:e5:3e:42:0d:c2:57:1c:df:78:83:9a:0c:84:
                    41:94:2d:32:08:40:bf:17:33:8d:6d:9c:ae:91:91:
                    54:c8:39:9d:5e:14:41:f9:ca:b8:b5:4a:17:42:1a:
                    98:9b:f5:4c:d6:03:18:44:b5:f0:b9:f6:f8:82:28:
                    a6:84:0c:d7:37:77:32:4b:df:40:74:84:47:16:5a:
                    40:8d:95:1c:6f:e6:89:98:4c:d5:df:49:25:33:c0:
                    0b:76:5a:b5:71:90:51:f4:e6:f2:40:66:76:9f:75:
                    26:da:f6:91:4a:f5:9f:b0:cb:a3:8f:c7:12:61:5e:
                    e3:50:47:ba:ae:81:b1:d8:17:c8:de:07:6a:3b:ae:
                    5b:55:c3:83:f6:89:d8:5c:8b:d8:79:a6:14:78:d3:
                    06:9f:68:6b:32:ac:96:c4:da:70:4e:4c:26:c8:aa:
                    ee:e6:6f:cc:68:32:c0:99:6d:83:22:b2:72:0a:e8:
                    34:d2:01:a1:54:84:f2:fd:9f:7c:27:6c:61:7f:fd:
                    01:15:c1:2c:40:ee:7a:0e:bc:84:11:f5:1b:31:54:
                    7a:af:68:04:cb:69:a5:fe:64:9c:74:a8:96:fb:c4:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:D3:A4:7D:CB:9C:C2:29:EC:04:0B:B6:2B:56:13:67:59:94:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.242.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:38:95:91:e3:6f:1d:8a:24:a2:d8:e5:c9:8c:42:2a:b3:
         25:d0:4a:2f:60:ae:2d:21:7b:5f:fe:a1:62:0a:fd:76:a6:f9:
         f0:e6:c4:e1:28:61:bc:63:df:0f:8a:f6:77:e7:57:8e:7b:3f:
         f6:eb:9d:74:70:23:9b:51:1b:93:e5:8f:22:f5:92:79:51:35:
         ca:58:d8:3d:da:fe:6a:a7:a2:98:4a:6a:f3:64:a2:d5:7c:74:
         a9:6a:02:f7:9b:4a:3d:bb:85:00:c0:e5:2c:76:1c:bd:e1:0c:
         31:2d:15:aa:4a:3c:e8:d1:b8:75:43:52:41:af:16:5c:49:b4:
         6d:7a:52:28:a3:07:fe:70:c6:d3:91:5b:bf:c2:b7:9a:12:c8:
         b3:c0:94:7d:25:37:0c:41:1d:80:3d:a0:1b:f9:2b:8e:ea:b9:
         21:21:f1:30:17:8f:e5:f6:4e:80:11:62:c5:3d:d0:92:33:5c:
         31:99:36:61:d2:a6:d5:7d:d1:04:f7:9f:e3:b6:41:13:b4:63:
         21:36:d9:40:bc:2c:88:0a:9c:38:5c:d7:72:7b:cc:15:aa:cd:
         dc:06:c7:6f:dc:bd:da:2a:e9:5d:a2:e7:c8:7e:7f:52:b9:11:
         6b:ca:5f:60:11:94:77:15:75:26:24:5a:55:07:e5:e2:0f:6a:
         1d:ca:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:55:17 2025 by rpki-client