Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa
File:                     5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa (raw, json)
Hash identifier:          MgXpeXX78oK8HCUCVVCI3sEmHCEoYRKqAZEKfNpDHvo=
Subject key identifier:   90:61:4A:D5:F3:D9:4B:AD:10:C6:8A:5F:92:B7:D5:22:BC:8E:7F:50
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584A3B7AFBE7C9BD175015108F80
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     5650
IP address blocks:        172.84.188.0/24 maxlen: 24
                          172.84.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fb:e7:c9:bd:17:50:15:10:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=79cca9d2-3e86-4ff6-81e7-6441309ebc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:1e:d6:c8:ad:81:cb:19:71:80:61:e5:6a:
                    5d:25:b9:8c:73:30:c3:ac:cb:f3:7a:2d:e2:6e:eb:
                    65:bc:39:ba:11:ec:4a:62:a1:3c:d6:86:92:e0:7b:
                    c2:9f:4c:bc:9c:4b:7c:29:7a:a4:24:8d:5b:a1:f9:
                    eb:e2:8e:43:20:ec:7e:ef:b9:61:31:da:a6:14:24:
                    7f:03:f0:58:27:3e:b0:77:00:07:dc:cd:71:3c:f8:
                    9b:b6:91:48:48:8e:6f:cc:4d:19:f8:c9:db:52:18:
                    80:24:04:af:fc:07:70:0e:2a:d9:a7:3c:e6:d1:d0:
                    0c:b8:e6:7d:cd:c7:32:9c:a0:f3:94:8d:a1:3a:66:
                    6b:ea:8b:f1:84:8c:90:4e:34:09:53:f3:9f:ce:5f:
                    f8:e0:fe:8b:0a:97:14:7a:31:d7:3b:8c:c1:d1:ae:
                    11:0d:b5:fd:34:d3:86:ad:c8:55:56:7b:fd:26:54:
                    d0:91:e8:99:fc:ec:11:39:0f:fd:44:42:b0:93:bf:
                    96:12:58:89:7b:d3:e2:5e:de:44:08:b8:70:51:c9:
                    be:b7:12:fe:5f:c0:c9:d8:0d:13:fb:e0:cb:b8:4f:
                    80:3e:3a:29:b1:9c:fb:34:45:bd:8d:f7:3f:f6:d5:
                    89:10:aa:60:b9:e8:8e:a6:67:be:60:0b:df:c9:d1:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:61:4A:D5:F3:D9:4B:AD:10:C6:8A:5F:92:B7:D5:22:BC:8E:7F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:ec:f1:86:5d:1b:e7:d8:73:9c:7b:9d:81:7d:78:1a:a4:
         4e:a4:c3:a2:25:a2:e3:f8:17:e4:67:84:20:92:1d:a6:53:e5:
         c7:9f:28:d4:19:b8:9f:c3:9c:3c:33:c5:cd:77:42:35:cd:f2:
         6b:17:5b:8c:ac:ad:d4:19:49:80:f0:e3:5e:fb:ba:14:7f:97:
         dc:d5:6e:c0:78:b2:72:a0:2d:47:b9:9b:b2:0a:07:ed:9f:b6:
         99:b4:1e:cc:0b:94:da:95:6c:96:7c:2c:be:e8:67:5b:2e:af:
         94:b1:89:b0:51:4e:d7:30:38:ce:b9:e6:af:36:1a:04:d9:03:
         b2:2d:d6:b7:12:4b:17:7c:96:77:ac:3a:9d:da:a0:25:55:82:
         f8:04:6d:94:70:fb:4c:46:29:c4:20:b2:38:4c:c5:ab:8d:7b:
         51:94:8d:3f:3c:fe:8f:96:16:29:a8:a7:61:0a:1c:60:14:f0:
         88:38:b0:6d:87:56:fc:f8:ce:ca:9e:eb:12:d8:c7:b2:fb:38:
         aa:5e:96:0c:23:b9:87:7f:17:8f:14:8f:a2:ff:f8:e7:95:68:
         54:eb:63:96:b6:db:33:97:12:5c:a3:bf:a6:92:cc:75:61:b3:
         bb:85:5a:60:27:86:b6:8a:94:6b:a3:72:1e:db:04:5a:6b:69:
         b4:9d:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:13:37 2025 by rpki-client