Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d7dc447-a606-377e-a09c-e239c744710b.roa
File:                     7d7dc447-a606-377e-a09c-e239c744710b.roa (raw, json)
Hash identifier:          rguZJLUmHheEC3DdrxwBXUhzfLtihoFrV8E8FCt5n60=
Subject key identifier:   FF:D6:92:FD:A8:CF:51:B8:54:C1:EB:B7:CC:B5:D4:B0:D8:22:06:77
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A53D48F740F1BA9B4B6680
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d7dc447-a606-377e-a09c-e239c744710b.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        165.232.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:3d:48:f7:40:f1:ba:9b:4b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=7f4f3491-0549-45f6-8b53-5bfc43bc857d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:c0:29:09:24:6a:2f:92:de:dc:54:c7:a9:
                    d1:4f:23:e6:60:6a:e4:37:ec:3e:51:8b:5c:0d:39:
                    0f:09:d2:32:ef:05:ce:9c:a3:9d:ac:e2:8a:f8:58:
                    98:4d:5b:6f:78:5d:83:7a:26:44:f3:eb:6c:fd:f2:
                    66:b5:32:69:3c:c2:30:a1:3e:0b:07:ec:a0:32:8b:
                    aa:cf:6f:1a:df:28:04:90:eb:d8:b5:35:a3:dd:fc:
                    5a:98:45:3f:ba:51:15:cf:f9:88:40:de:64:e4:05:
                    38:44:83:12:05:1c:78:d1:5a:3d:9c:15:09:7f:a5:
                    7e:c7:ec:b9:78:0c:ac:1e:d8:17:2e:97:d5:f5:6f:
                    ca:ff:78:bd:f5:42:2d:33:c4:8f:81:bb:9f:12:10:
                    9e:1c:ab:a7:cc:04:78:bc:d9:b0:23:1a:fd:0f:9b:
                    21:c8:c8:d4:53:61:5c:bc:36:a4:9d:f2:1b:f1:f7:
                    2c:e8:71:1e:c8:91:b7:79:a7:d7:a3:bb:cd:d7:69:
                    8c:0a:53:87:7c:0a:e6:bb:14:fa:8c:71:72:60:70:
                    7e:e7:7e:b9:9b:04:9a:51:3d:79:c9:96:c3:61:97:
                    d3:98:41:60:cd:4d:f5:dd:e5:26:76:69:a6:54:6e:
                    25:31:ab:32:68:bc:53:75:51:72:96:20:9a:a7:4e:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:92:FD:A8:CF:51:B8:54:C1:EB:B7:CC:B5:D4:B0:D8:22:06:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d7dc447-a606-377e-a09c-e239c744710b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.232.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:cc:4f:8a:18:58:e8:7a:31:2f:ce:ea:26:0e:68:a6:28:
         2d:4d:e8:98:e8:62:1f:0b:1a:1a:fb:e0:2f:87:3d:1a:a8:28:
         65:06:cc:74:5f:a7:63:4c:da:47:da:02:2e:d1:23:82:0f:87:
         d1:d7:43:2c:9d:4c:bb:1e:7f:8a:03:de:f9:e2:0e:f1:d9:97:
         2d:75:3a:bb:26:e2:1e:27:22:1b:c1:51:f5:94:5d:f9:7e:47:
         a2:f3:e5:ed:08:36:c8:2e:f4:88:d2:cc:d6:d4:96:bd:a1:fe:
         f4:22:6a:4c:7c:0f:cb:9a:f1:99:d7:b8:22:0b:5f:a4:f5:fb:
         0e:79:73:92:14:52:0f:f8:11:56:c2:bb:25:20:aa:d2:c1:70:
         a8:e2:c0:04:32:8a:3b:92:28:07:df:2d:64:30:d3:0e:c1:97:
         ce:c8:20:6e:1e:7f:8b:76:6a:77:ec:06:71:c7:ae:10:24:3a:
         8a:a5:38:8f:c1:5b:e4:fa:8f:e0:06:6a:e1:7a:3d:fa:ab:33:
         1d:f2:46:ec:5c:bd:33:7a:92:01:68:bf:4d:73:3c:0d:4f:79:
         60:3c:fe:4e:4d:00:4c:64:92:09:51:83:5f:a1:d6:61:1d:2d:
         76:e2:b4:51:a0:d8:fa:fc:98:54:4b:53:e8:bf:d8:da:0f:b6:
         58:97:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:36:04 2025 by rpki-client