Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa
File:                     b551df8a-9563-3e0f-856f-1ea0420a13dc.roa (raw, json)
Hash identifier:          xNTRn3Ffi61E0QMEH4j97vldoHmiP6e/UEEnqyfriy4=
Subject key identifier:   9B:C4:F0:B4:9F:8B:14:14:2B:A0:BC:FA:94:85:3D:12:23:03:48:EB
Certificate issuer:       /CN=1f590187-fc1d-4681-a0a4-aa1d23202e80
Certificate serial:       010D0C9F43285849C4D4B31EF86A55F19C271100
Authority key identifier: 59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     19945
IP address blocks:        216.46.192.0/19 maxlen: 19
                          2620:101:3000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b3:1e:f8:6a:55:f1:9c:27:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f590187-fc1d-4681-a0a4-aa1d23202e80
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=425898cc-1136-4734-8bd7-17b4004caeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:7c:da:6e:08:1a:f6:c6:11:19:82:6f:1e:
                    50:33:bb:f5:03:e7:2a:d3:ea:30:91:e4:04:14:c6:
                    a4:ca:be:48:db:41:d6:3e:03:79:16:2b:44:95:2e:
                    2b:c6:d8:c4:a2:70:da:55:3a:86:13:d8:4e:a1:19:
                    98:44:31:1f:5c:d0:ff:30:95:b5:1c:9e:49:a7:b8:
                    ce:a4:7f:27:a3:e8:a0:d6:42:36:e4:1c:88:81:0b:
                    c3:d4:f9:10:55:04:97:55:36:e3:c1:17:f4:35:2b:
                    af:9b:c9:c2:62:e0:c2:df:bc:e9:cb:65:35:06:53:
                    b3:79:40:97:0f:3c:3b:79:47:1d:9e:17:be:b2:3b:
                    c9:a4:08:16:43:cb:cb:ef:cc:17:16:02:0e:25:5c:
                    fb:aa:06:bf:5a:12:ad:de:47:d6:bc:e8:92:98:87:
                    fa:8c:bb:0d:14:64:73:e8:b6:5d:ea:bf:b7:43:5c:
                    49:66:63:6c:55:6b:a0:b2:0c:d3:69:60:6a:20:dc:
                    77:94:df:e9:9d:22:09:67:57:46:8b:c0:09:79:80:
                    23:1e:4e:93:ad:3e:30:ee:3e:ed:62:3f:2d:10:04:
                    84:93:1c:c6:a6:cf:85:7c:68:9b:c7:08:2f:f0:3e:
                    34:ef:f5:22:28:bc:b8:73:19:1d:14:7e:1e:fa:e1:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C4:F0:B4:9F:8B:14:14:2B:A0:BC:FA:94:85:3D:12:23:03:48:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.crl

            X509v3 Authority Key Identifier:
                keyid:59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.46.192.0/19
                IPv6:
                  2620:101:3000::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:d4:9a:ba:54:47:5b:4f:6b:c8:2d:2b:84:b6:29:5e:a4:
         2f:0e:1b:11:78:99:78:f4:bc:2f:6b:1f:ca:18:37:f6:4a:96:
         ec:6d:87:7c:d2:a2:45:7a:14:b9:74:50:8e:fb:08:2b:cc:3e:
         31:88:e0:32:c7:14:6c:4b:56:49:5a:3f:e5:c9:fc:c7:a5:4f:
         e5:d6:7b:09:08:ed:26:be:49:03:77:e2:57:c8:bb:48:5d:a6:
         fd:00:9e:28:dd:7e:a8:16:8e:15:81:52:8d:4c:4d:44:00:34:
         c5:d2:e4:96:41:af:b6:64:44:54:2c:0d:db:b8:ec:00:f5:b2:
         aa:8f:03:64:0b:58:16:d5:8c:e2:9c:f6:b1:c4:79:92:ff:cb:
         67:3b:2a:4b:bd:a3:37:75:6d:45:cd:87:41:ce:5e:39:8e:b1:
         62:69:df:f1:41:cd:9c:c5:78:04:ff:9f:e9:0b:7e:44:b9:58:
         f9:71:fa:4c:e7:cb:0d:f7:bf:4b:42:b1:66:89:18:61:3e:e4:
         6b:aa:e0:11:67:82:d0:e8:1e:64:53:5c:fb:c4:c5:5c:bb:ab:
         6a:ed:80:01:b3:12:d5:1f:89:13:7d:c7:c7:ff:30:c7:7d:2d:
         23:45:f0:25:21:a6:e2:e5:8f:7f:91:8a:62:b8:75:0f:99:9a:
         a0:a8:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:56:17 2025 by rpki-client