Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4819fdba-1853-3b2b-a8ce-43f9d9081d78.roa
File:                     4819fdba-1853-3b2b-a8ce-43f9d9081d78.roa (raw, json)
Hash identifier:          dpq8gchlXDMD3YYVgfOXVmmWVpS/CsQHl2U2LA8SGD0=
Subject key identifier:   D6:F0:3D:03:BB:3E:B6:D5:B6:83:27:FC:D6:9F:3A:16:77:6B:59:D2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A3B642F5AEE0FA62F39F77C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4819fdba-1853-3b2b-a8ce-43f9d9081d78.roa
Signing time:             Wed 18 Jun 2025 12:15:19 +0000
ROA not before:           Wed 18 Jun 2025 12:15:19 +0000
ROA not after:            Tue 16 Sep 2025 12:15:19 +0000
asID:                     29802
IP address blocks:        172.94.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:64:2f:5a:ee:0f:a6:2f:39:f7:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 18 12:15:19 2025 GMT
            Not After : Sep 16 12:15:19 2025 GMT
        Subject: CN=1648a9e1-fbb5-47a5-8f8a-760de83f6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:13:5e:8e:ba:0f:b5:2b:05:fa:bc:38:ef:
                    e4:04:60:cd:fa:5b:e3:51:e5:66:cb:94:2e:32:94:
                    da:38:80:66:4a:c4:63:47:75:b7:47:ae:3e:ef:70:
                    c4:d7:6d:53:98:c3:c0:36:0d:8b:5e:54:7d:25:44:
                    40:be:b2:6a:51:94:fa:86:fd:3f:d0:d0:c3:ec:b8:
                    8f:27:cf:94:24:98:6a:3a:66:11:dc:be:26:c0:ce:
                    8b:cb:da:81:ea:fd:a1:ec:90:d1:b6:fd:8a:ab:ac:
                    9c:ed:42:98:63:eb:40:66:01:92:6f:69:98:db:60:
                    a3:97:87:67:b3:55:05:79:2d:0f:2c:d5:ef:df:a2:
                    99:c1:ce:d1:bd:6e:36:fd:5c:02:8c:10:c2:02:e5:
                    cc:e0:87:31:ae:0c:32:b0:2b:2b:3c:be:ce:c7:a8:
                    2d:36:63:31:44:06:3e:da:f9:89:fe:0b:10:20:09:
                    80:06:4b:42:1f:13:e1:1a:56:81:6e:7e:37:2f:f1:
                    cf:f7:9b:91:47:67:1b:3d:0c:7b:1b:7a:74:c1:f1:
                    b1:24:5d:9a:3e:36:ce:7e:62:85:82:01:da:25:be:
                    e3:7b:57:a3:1a:d7:90:3b:6a:e6:0d:0f:c4:54:3c:
                    18:3b:4c:4a:5f:2e:7e:c3:e8:a2:12:c5:6e:be:59:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:3D:03:BB:3E:B6:D5:B6:83:27:FC:D6:9F:3A:16:77:6B:59:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4819fdba-1853-3b2b-a8ce-43f9d9081d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:3b:6c:e0:83:72:9d:55:25:a0:dc:d5:92:bd:6e:a2:e9:
         a5:4c:30:08:65:5d:b9:fd:21:7c:7e:8c:81:17:6f:39:54:b8:
         d6:e5:13:52:00:30:62:40:34:b1:9e:37:96:5c:9d:3b:e3:67:
         43:f1:2b:0b:64:ca:33:70:81:73:8e:b3:44:04:83:e4:00:59:
         32:ca:11:67:f8:a6:b2:fe:f0:3a:5e:21:2a:66:89:e5:13:d1:
         78:41:a7:89:84:5c:6d:7c:b5:7e:f7:83:01:a9:2b:34:e6:0b:
         87:be:e7:e8:af:fe:5e:0b:7c:63:bc:ea:e0:d2:2e:48:dd:f5:
         20:21:f8:4f:28:d5:d9:41:8b:45:60:c5:10:ce:89:00:77:c3:
         db:49:5d:71:e6:0a:9c:ab:9c:28:6c:d8:a4:b3:fe:5b:0a:85:
         36:72:17:b8:b2:5c:22:b7:6e:fb:b8:55:f5:7a:db:ef:54:26:
         4b:bc:16:3a:41:02:cb:c6:38:74:48:03:10:6b:5f:6e:41:13:
         47:e0:09:f5:84:c4:05:86:e6:d2:fd:22:58:28:1d:1f:2d:07:
         50:c5:ca:bd:78:2f:96:c6:4e:e4:5a:13:f3:3c:f2:4a:f0:c9:
         13:5f:c0:4e:b2:3d:9b:e4:bb:47:2f:20:dc:eb:f0:75:db:86:
         80:1e:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:13:04 2025 by rpki-client