Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/882df34c-1b20-34da-83f4-366df221bb54.roa
File:                     882df34c-1b20-34da-83f4-366df221bb54.roa (raw, json)
Hash identifier:          yLwX6BECK13F+92+s8H2ixedYlRLsuT8eU3wbt/HBpY=
Subject key identifier:   D6:00:02:C1:AC:7B:1A:28:65:DA:77:49:36:A6:65:CD:39:32:87:63
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584A3A157F78B912172F54EE0AC0
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/882df34c-1b20-34da-83f4-366df221bb54.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     852
IP address blocks:        139.173.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7f:78:b9:12:17:2f:54:ee:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=961ef1e0-b538-4b2b-ba9b-ee999155f9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:ec:6e:d8:1e:ec:fb:12:2f:41:be:4b:2d:
                    92:33:c8:24:b6:15:9d:7a:45:4c:ac:7a:12:31:6e:
                    30:bf:47:db:b9:23:55:2e:84:ec:74:24:2d:ee:77:
                    e0:a1:72:4f:61:39:49:0d:bf:84:85:3f:56:4b:6c:
                    c4:48:84:2a:5f:7e:29:80:69:71:76:ac:d4:bf:f5:
                    1e:82:0b:0c:40:99:75:21:95:c7:79:6e:81:50:90:
                    50:c1:d2:5d:8b:0e:ce:ac:1b:92:0c:54:6a:54:fe:
                    8d:a9:25:97:50:8a:f2:50:55:9f:c4:39:46:00:5a:
                    79:c5:8c:8f:5b:70:b0:4a:ca:81:15:c2:e6:9b:f8:
                    fe:13:0d:c2:19:33:3b:84:51:b3:cf:b9:35:be:88:
                    10:2a:ce:c9:51:0d:79:3c:14:ae:39:a5:bd:0c:5e:
                    3c:65:41:5e:ca:c9:65:88:fb:91:d2:ac:e9:c7:d8:
                    da:b2:93:1c:68:6e:bd:50:d2:f4:28:c7:17:15:77:
                    bd:6a:af:08:54:8b:d7:3b:c5:d8:64:e2:76:cf:1e:
                    12:36:35:69:10:20:93:5a:2b:63:86:3f:88:9c:39:
                    4a:0b:06:84:a2:a2:a9:2c:2f:35:ac:54:76:97:69:
                    6f:6a:08:f9:95:07:94:8d:7c:a2:df:eb:4d:21:62:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:00:02:C1:AC:7B:1A:28:65:DA:77:49:36:A6:65:CD:39:32:87:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/882df34c-1b20-34da-83f4-366df221bb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:17:f5:9b:4f:ad:3f:df:3a:24:b8:96:ab:7f:23:17:e6:1a:
         a1:f4:17:ab:57:80:56:64:1d:9f:2b:a8:32:53:f4:78:97:db:
         38:77:9e:62:57:1a:ab:7a:d4:ef:4b:46:78:a6:83:b5:e6:db:
         8e:49:eb:5d:e3:b7:d5:53:2a:e5:b8:fd:b7:ff:bf:10:80:4e:
         1f:e5:b2:27:39:20:d7:8c:fd:44:cb:14:25:0d:dd:dd:b9:e9:
         7b:c2:8d:e1:fe:46:d9:62:75:98:76:33:22:8b:c5:35:08:8b:
         ee:41:71:84:42:bf:47:79:32:e0:8f:50:1a:b1:ba:f7:66:85:
         dd:d5:14:c9:43:44:54:8c:39:7c:10:c8:17:d6:f7:a7:4e:17:
         9e:bd:96:9c:aa:f0:33:9e:9c:a2:c8:bd:77:ec:cf:93:51:41:
         d6:bc:65:a8:b1:d2:6d:6f:06:fc:95:51:c6:e6:33:7a:57:b7:
         84:87:c3:61:9b:96:79:cd:3a:81:d1:d8:7c:9a:b4:02:72:dd:
         a9:5e:d6:2e:05:b1:64:eb:4f:e7:0f:dd:b1:28:5b:96:02:63:
         1c:fb:9c:e5:6a:f7:3a:a2:28:c4:e8:4a:9f:2c:fd:44:49:5f:
         87:d7:0f:6b:d6:90:49:60:a7:7a:e4:f9:2f:4a:82:5c:82:59:
         a2:13:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:09:33 2025 by rpki-client