Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ee542d-aa8b-3c42-8fd6-391be8e3151e.roa
File:                     24ee542d-aa8b-3c42-8fd6-391be8e3151e.roa (raw, json)
Hash identifier:          zaDsuI05kOWO6c+7PK28zams9YRL09ccPCyCZ1f/aec=
Subject key identifier:   EE:42:5A:1F:E5:49:84:6D:04:B1:26:E1:71:CC:C8:61:11:5A:C0:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC764D8922E1526ED90500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ee542d-aa8b-3c42-8fd6-391be8e3151e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        174.57.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:76:4d:89:22:e1:52:6e:d9:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=928302ac-d451-43b1-825f-acb62d17dd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:86:08:eb:35:90:e1:1f:06:6e:30:93:de:
                    3f:af:89:13:6d:02:fb:a4:0b:60:68:f3:d2:1c:e8:
                    5c:9a:f8:6f:94:c0:cd:8b:bc:f0:68:7f:bc:c9:3e:
                    ca:37:92:35:19:90:fe:0f:6a:6b:66:cd:2f:85:07:
                    e1:04:9c:ed:e6:ba:e8:da:9f:71:10:e9:0b:f7:33:
                    6e:a6:4c:3b:aa:3b:95:d1:62:ff:e2:de:7e:96:9c:
                    ec:1e:e6:d2:cc:ce:dc:d2:d5:c4:1f:a6:c7:f6:5d:
                    c4:f6:7e:b7:b3:48:30:f9:ea:d5:fb:05:59:3a:8c:
                    9b:ef:bc:c6:11:a7:83:4a:15:28:a6:ad:49:16:9d:
                    c5:73:74:c4:e9:39:e8:da:9f:01:2c:fc:42:34:aa:
                    9d:7d:06:fe:14:53:96:c4:77:f1:31:70:36:2b:57:
                    7d:0c:2c:23:c6:0d:ba:90:cf:11:49:a5:c8:5a:a5:
                    ed:b7:94:c7:84:5d:01:c4:0d:b5:9f:40:02:80:4f:
                    5e:23:2e:15:e5:64:e9:8a:d9:20:f3:2f:3a:49:38:
                    d0:11:37:df:2f:68:f2:ac:28:eb:b7:9d:fd:3b:13:
                    08:11:a1:62:6f:4b:ce:e1:26:49:d7:68:86:25:75:
                    07:94:23:56:c2:d5:4f:8c:51:5e:77:05:5b:4b:6d:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:5A:1F:E5:49:84:6D:04:B1:26:E1:71:CC:C8:61:11:5A:C0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ee542d-aa8b-3c42-8fd6-391be8e3151e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:0b:58:11:ad:77:f6:e3:50:77:8f:a1:b1:46:12:60:f9:
         1b:16:f9:8d:64:ad:1c:7a:7d:85:56:cd:25:35:29:fa:73:cc:
         d3:c0:52:5b:7e:e0:5f:5a:a7:b3:33:a6:f2:6b:56:d4:07:31:
         40:59:90:6c:4e:a4:a3:3f:0a:f4:90:37:ed:30:62:83:15:dc:
         ea:09:37:05:f1:c0:33:8a:18:bc:e1:44:6f:7f:c9:3c:8a:bb:
         bf:c9:24:74:01:10:e2:a8:b7:a4:65:d8:32:e1:d9:9f:94:48:
         0e:1d:af:8b:5f:bd:20:af:31:17:ae:b9:66:72:3c:32:68:4c:
         a5:de:2f:b6:0f:38:cc:dc:a3:28:48:5d:d6:3c:99:bf:ac:15:
         ec:8e:4e:e2:b7:fe:b8:a5:90:49:8f:c4:40:d4:91:ad:90:41:
         86:06:e2:28:b0:34:c7:a5:6e:f0:78:ab:9c:e4:6e:a4:24:62:
         0a:45:d6:87:fb:41:73:6d:95:7a:50:36:0f:74:05:f7:e5:4f:
         b1:84:94:ea:2c:ca:2d:51:a4:6a:68:1b:ab:e8:b5:9f:23:b5:
         6b:b7:e6:e3:ca:3e:78:87:c5:86:49:da:0e:0e:d2:13:db:68:
         36:10:d3:8a:36:dc:35:a2:23:17:60:64:54:3c:73:25:09:99:
         80:84:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:27:12 2025 by rpki-client