Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0615cf5c-db58-31f1-bbf8-ee79f9c039a9.roa
File:                     0615cf5c-db58-31f1-bbf8-ee79f9c039a9.roa (raw, json)
Hash identifier:          ocu0YEyHF0T8e5Qc6zDe7kSDFwvcdiB9l4RIoip/LCA=
Subject key identifier:   B8:9E:4E:8D:FB:0E:36:E2:7D:64:0E:09:3E:B2:57:D9:8A:03:C5:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C084D7F03D2959BA3219500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0615cf5c-db58-31f1-bbf8-ee79f9c039a9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        76.141.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:4d:7f:03:d2:95:9b:a3:21:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0b879530-6f2d-467a-97ea-8c3e7acc5613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:1a:a1:22:fa:f3:45:34:df:96:6e:e2:86:
                    eb:47:75:97:19:0f:1d:b5:a2:b2:46:13:1f:43:7a:
                    29:b5:4b:3f:5e:24:44:ab:30:1f:e4:29:ae:cb:91:
                    64:db:6a:8e:85:60:f2:be:e6:30:ab:53:21:34:8d:
                    49:93:c8:be:d3:1a:41:9f:06:5f:6b:26:98:10:75:
                    60:2c:6e:49:21:68:a6:a1:b6:ad:fc:0a:31:e2:2c:
                    33:96:ec:b3:c0:94:79:f2:87:58:df:e3:53:05:d7:
                    cf:fb:34:83:c3:43:d9:50:0d:fb:b9:3f:1a:53:85:
                    c0:8a:9c:fe:cb:5f:46:9e:de:d9:65:c8:74:6b:16:
                    cd:80:11:2c:c4:5d:7c:e5:02:f3:e4:9b:e0:64:41:
                    09:6f:1e:ce:d2:66:bd:02:5b:9f:eb:30:08:41:e7:
                    df:51:d1:f2:e5:1a:40:04:e9:44:eb:c4:5f:62:bc:
                    7d:2d:d2:2d:2e:72:98:ea:9f:83:7a:dc:b6:47:9b:
                    38:8c:b8:11:0a:43:3d:3a:1f:9c:5a:dd:2e:17:ee:
                    c9:ba:ff:67:1b:9f:43:46:31:dc:1b:78:b9:88:a3:
                    9d:e0:e5:63:46:5e:69:3d:6c:2a:6b:1c:bc:ab:00:
                    74:58:ee:99:4f:18:35:68:de:50:4b:f6:c2:6c:3f:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:4E:8D:FB:0E:36:E2:7D:64:0E:09:3E:B2:57:D9:8A:03:C5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0615cf5c-db58-31f1-bbf8-ee79f9c039a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:a1:7a:c5:b9:97:e6:82:da:4c:16:ba:15:86:c8:7b:81:cf:
         e4:a4:a6:0d:00:88:86:9a:08:b0:c9:03:38:00:3e:d2:9c:64:
         e9:a1:b6:d8:52:ca:f1:47:d2:d0:60:ab:64:6c:b7:aa:68:0b:
         64:72:0e:ef:cc:d5:2a:82:39:a7:fc:2f:8e:ae:01:64:be:67:
         ca:64:36:0b:ca:34:0b:c5:95:0f:4c:69:44:74:ab:71:e7:49:
         46:11:c1:6d:39:7a:05:ba:12:c3:ca:ad:20:10:d6:67:04:76:
         44:3b:48:f2:44:19:5d:fe:24:dd:4a:34:1d:2f:b3:b2:b6:b7:
         98:46:f7:b6:fc:85:a0:ac:25:69:0d:9d:1b:ae:bd:84:ac:ce:
         27:21:bd:03:23:60:a6:8b:1e:9b:8b:c1:bc:53:13:66:a2:93:
         9a:9d:18:1c:91:9d:54:d7:82:e6:4a:ba:22:35:0e:6c:35:9d:
         41:40:1d:0a:ee:63:da:9f:37:1c:68:9b:27:28:c1:11:b3:ce:
         2c:f1:c1:c0:45:dd:70:c3:46:42:57:5e:35:cc:4a:72:8a:6b:
         f6:de:a0:da:30:66:df:24:50:c1:2b:88:35:37:4a:71:2f:61:
         c5:af:be:ab:0b:8e:b6:75:65:5e:9b:66:8d:ff:27:73:c2:f9:
         72:f6:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:30:52 2025 by rpki-client