Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa
File:                     3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa (raw, json)
Hash identifier:          aYqAXfTCq1RCiMwhbLjH/OQIOl4uGd/GpH5FOrqQjFA=
Subject key identifier:   0B:D5:45:12:12:68:5F:77:21:D4:A8:72:A6:32:5B:D1:46:5C:41:DD
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AD7D12A4355AFBDF9BAC2CA00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        132.219.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2a:43:55:af:bd:f9:ba:c2:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=933eeece-4fcd-4e84-b230-3686ecb2178e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:48:6f:73:16:0d:88:c1:b5:37:4e:db:e4:
                    f7:8f:32:b6:40:b3:3e:03:89:0d:ad:1f:de:5a:0e:
                    32:e9:59:af:77:84:38:68:bd:34:be:3d:85:02:55:
                    f3:9b:af:70:37:69:ea:45:15:5c:4d:18:ce:d2:6f:
                    47:d8:8a:b7:2e:bc:3c:44:3e:f8:d2:91:95:62:82:
                    eb:20:eb:32:ad:ed:b3:e5:64:f9:0a:43:be:74:31:
                    43:ec:27:15:e4:fb:98:56:9d:3c:62:90:20:19:c0:
                    d4:25:a6:ee:1a:f3:14:71:ff:98:ac:d3:8f:94:60:
                    5a:c6:77:4c:cc:fc:2c:c0:23:0f:1f:e8:60:0e:ba:
                    dd:f9:ea:d7:68:62:dc:d9:18:27:bc:e2:7f:d8:f0:
                    d9:1c:73:3f:b8:d2:45:e9:6e:6e:e5:0b:d1:1d:9b:
                    54:97:48:c7:bf:9f:07:4c:62:f5:0f:10:53:66:ac:
                    6e:26:4e:fb:98:36:64:c5:33:cf:23:38:46:27:dd:
                    78:17:0d:1a:15:c2:54:27:47:eb:69:fe:d1:15:3a:
                    6f:a6:80:11:20:06:8b:b9:29:a9:2b:1f:15:ef:98:
                    d6:04:ce:f9:07:8b:e8:86:82:6b:a6:63:4c:26:2f:
                    63:64:23:e0:89:60:e3:12:5e:52:40:48:99:e0:e9:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D5:45:12:12:68:5F:77:21:D4:A8:72:A6:32:5B:D1:46:5C:41:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:68:18:9e:7f:c4:40:29:fd:d4:59:81:ce:21:d7:46:35:
         b0:5b:74:1c:fa:73:2b:20:83:76:67:25:0b:bd:d3:03:a3:cd:
         e7:22:e2:0d:15:a3:cc:52:2c:8c:93:a3:d8:f5:19:5a:71:40:
         53:d1:5a:f1:c7:a4:ca:0e:04:95:12:ce:4c:ed:a8:dc:ab:29:
         a5:a6:0d:12:2b:c3:bf:b7:5b:a5:86:93:d9:cd:ed:6e:3e:7d:
         a0:47:9c:0d:ed:4e:50:59:b2:66:2e:ab:d4:bc:ae:42:f2:68:
         eb:ce:72:a5:e5:0a:9b:66:37:ad:00:63:24:ba:1e:32:3a:62:
         58:9f:93:5d:21:16:36:67:4c:86:6c:20:29:51:ef:c6:0a:63:
         46:cb:2b:5a:63:61:d8:8c:4c:7e:f5:d5:54:55:ad:7a:ed:10:
         46:bb:5c:3d:44:a8:3d:2c:c8:31:2f:12:72:bf:9c:5a:af:89:
         24:48:09:11:ff:b3:2f:2c:89:93:38:f4:f5:df:42:3b:7c:69:
         77:82:32:5c:60:c9:db:be:12:cf:be:e0:80:dd:02:14:a7:62:
         88:3b:24:b7:50:2a:f0:93:81:b9:38:d5:bf:a5:f1:28:79:e1:
         67:67:06:02:30:db:b5:d6:51:d6:4d:e8:88:a5:57:71:85:b3:
         b5:0c:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:02 2025 by rpki-client