Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/da2eb479-77a6-3977-819f-05a1855156a4.roa
File:                     da2eb479-77a6-3977-819f-05a1855156a4.roa (raw, json)
Hash identifier:          E4NeCSyKhGzs7ASTvYEfSwRu+MuXxKq8y78Uid4VuKA=
Subject key identifier:   FD:B4:4B:39:AD:CB:99:DE:A3:50:10:A4:F3:3D:4C:66:14:35:DA:85
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285849F715282E1DEC2E6579FCB620
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/da2eb479-77a6-3977-819f-05a1855156a4.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     376
IP address blocks:        132.219.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:28:2e:1d:ec:2e:65:79:fc:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=3bb10f0b-072b-456b-859a-76d6b56488ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:e0:72:db:42:95:02:7c:1f:65:f3:45:b1:
                    b0:28:ef:5c:88:c4:b1:83:5e:f6:b2:19:78:67:f0:
                    65:c8:61:f1:b1:5f:00:c3:2a:a1:a3:2a:8d:ae:aa:
                    38:3c:b3:42:af:90:65:0f:39:46:4e:ab:8f:c8:18:
                    a1:82:67:60:f4:78:c5:54:79:d5:3f:1a:d0:07:26:
                    16:4f:76:8c:1a:4a:af:24:fb:6e:c4:17:6d:89:cb:
                    47:1f:98:2f:e5:dc:3c:89:7e:b3:5a:73:22:66:36:
                    12:4b:32:b8:9a:48:3f:20:63:bc:e2:3e:e6:87:cf:
                    7a:28:e1:7f:b4:3c:c6:29:ca:e0:aa:fa:3b:b7:cb:
                    b6:d0:75:ac:5f:64:f7:13:67:b9:60:33:2c:1d:03:
                    f2:29:1c:26:33:95:d6:5c:3c:77:8d:2a:31:f5:1a:
                    42:64:1f:41:7a:95:ea:7e:da:45:88:ce:53:97:9a:
                    d1:c6:81:3e:78:98:0a:19:68:ee:54:8c:00:2b:92:
                    03:e8:ed:ba:04:4f:5c:64:83:2a:22:73:8e:9e:af:
                    ce:35:a1:e0:07:68:e0:a5:43:e8:bf:00:79:5b:f8:
                    98:39:b8:47:f9:c6:b0:1c:bf:f7:19:4c:c6:a0:18:
                    da:ee:bd:5e:40:ba:dc:69:7f:e3:d5:84:04:09:b9:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B4:4B:39:AD:CB:99:DE:A3:50:10:A4:F3:3D:4C:66:14:35:DA:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/da2eb479-77a6-3977-819f-05a1855156a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:03:08:dc:e4:97:8e:20:7c:dd:01:76:31:5f:f2:b9:a9:62:
         84:87:a7:45:9d:c9:78:c8:fc:a3:03:18:40:89:00:52:ba:37:
         44:02:35:da:ac:00:86:de:65:04:5d:c3:8e:8a:c8:ea:22:8e:
         00:2c:ad:5a:de:d4:9b:5a:b8:d8:9d:97:8a:a1:17:33:19:05:
         58:3e:44:c6:72:e9:4c:b8:2b:67:b3:e0:f3:31:c3:c9:ad:8e:
         96:18:e1:ad:ea:61:8e:e3:51:d4:59:fa:d1:25:6e:31:ee:e0:
         ba:d2:a6:98:8e:55:bf:b0:af:40:b9:fa:27:df:a4:d2:c6:d5:
         4a:dc:ca:e4:55:2f:57:5d:54:b1:b7:5c:3b:cb:be:d1:55:d9:
         21:4e:c9:59:27:b7:00:e6:07:63:9d:1f:20:45:24:28:64:47:
         3a:87:46:f9:ad:52:48:78:7e:95:ef:77:8b:d3:d1:de:88:9c:
         03:4e:3d:bf:b9:18:a0:94:07:f4:37:e8:9c:7f:bc:7e:0f:ce:
         ac:71:c9:73:26:fe:c2:0e:2f:b8:cd:bd:00:d4:07:01:3b:89:
         1e:b0:63:bf:51:3a:1b:95:a7:2c:13:c3:bf:3a:43:55:66:27:
         00:b6:ba:e7:44:69:a7:96:0c:0f:05:71:86:a4:64:43:00:ae:
         7e:a2:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:58:55 2025 by rpki-client