Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/3ce8dffd-5872-3d56-bf82-01a2f99404c2.roa
File:                     3ce8dffd-5872-3d56-bf82-01a2f99404c2.roa (raw, json)
Hash identifier:          HwGz5bVaMiRglnPG25s5816DXSvPaKkB6Xle5RT8eTA=
Subject key identifier:   D0:C0:4E:3B:2C:D3:F4:17:7B:68:4E:24:25:B9:DE:B9:25:D8:FA:E7
Certificate issuer:       /CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
Certificate serial:       010D0C9F4328584A1F9024E08C46268031A83B00
Authority key identifier: 76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/3ce8dffd-5872-3d56-bf82-01a2f99404c2.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     46410
IP address blocks:        45.62.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:24:e0:8c:46:26:80:31:a8:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=815ee4f9-4b9d-45fc-9616-f3fb2badb892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:9c:25:d1:72:88:df:0d:16:df:9e:9f:90:
                    7b:a9:5f:89:ce:c9:20:1f:80:16:05:73:ac:82:79:
                    21:eb:34:b1:f1:7e:99:98:f6:ee:4e:e1:df:54:16:
                    e9:6a:e5:c0:7c:5d:0c:0d:68:da:da:fa:83:72:8e:
                    56:83:b9:df:b4:b7:0a:95:ed:b9:a6:b3:4b:44:22:
                    97:89:27:84:8f:ad:3b:46:83:05:16:6e:28:de:e6:
                    53:92:c6:85:35:70:d6:bd:dc:23:c8:82:ae:c3:20:
                    c6:49:8d:86:46:ed:1a:fb:01:d4:d0:37:01:08:33:
                    81:fb:20:74:37:36:5b:55:7f:07:b2:51:8f:5c:39:
                    af:4e:9c:2d:8e:71:89:d3:91:4c:5b:67:e7:c8:24:
                    90:a2:8d:50:71:fa:7f:5a:19:69:9b:a8:63:bc:d5:
                    87:64:21:82:2d:e3:6d:0c:02:28:02:b1:66:b4:59:
                    a3:14:e1:b0:79:f9:4e:3f:49:f9:34:23:d1:76:3c:
                    12:01:a3:64:d3:26:2c:4b:b8:5f:31:d1:8f:b9:c8:
                    fd:a3:87:f0:a9:5f:59:1f:7d:9b:48:e0:44:ef:04:
                    db:93:ba:e5:04:be:82:ca:42:c2:71:cd:58:69:ac:
                    35:92:05:93:f3:16:a0:e9:bc:eb:13:47:d8:d8:21:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C0:4E:3B:2C:D3:F4:17:7B:68:4E:24:25:B9:DE:B9:25:D8:FA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/3ce8dffd-5872-3d56-bf82-01a2f99404c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl

            X509v3 Authority Key Identifier:
                keyid:76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:09:24:97:7a:cf:27:2d:ef:ce:84:72:91:c1:87:87:07:9b:
         b2:34:c4:b1:a0:27:3e:33:05:d1:b3:6d:08:92:a4:65:0d:66:
         64:cf:1c:bc:63:06:7c:22:b1:d1:79:07:7b:45:b0:d4:ac:94:
         77:6a:1e:f4:de:c9:ad:b6:69:20:f4:2c:54:4c:37:5a:95:65:
         57:d1:2a:46:7a:14:23:ae:e0:bb:f7:cb:1e:1a:5c:7b:8d:46:
         7b:f3:67:32:89:c1:dd:51:db:3b:ad:b5:c0:c1:38:5e:9f:96:
         8c:98:72:e7:94:6e:2a:62:89:27:c4:e9:77:09:59:95:8d:87:
         8a:09:f4:87:71:50:0c:c4:71:99:be:b8:27:d3:f8:da:5e:6e:
         58:24:26:3a:d7:02:00:d1:b0:3f:c5:f5:16:20:79:85:27:b2:
         b1:d4:87:53:a4:b0:7c:3d:0b:8b:1d:6f:5c:66:49:67:40:4c:
         62:ce:db:37:52:c5:83:6e:c7:5a:6a:ad:31:87:26:36:43:77:
         3b:d1:db:95:61:7f:40:bb:9a:d8:3f:43:80:0b:29:6c:92:8a:
         18:b8:7c:37:86:ad:8c:fd:e9:7e:0a:68:55:a2:ea:8a:d9:08:
         36:20:1f:73:86:38:da:2d:b5:51:bd:4c:78:65:04:4e:18:6c:
         f6:95:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:26:57 2025 by rpki-client