Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56fc6943-2e48-3f51-b3f9-60fb5a1ec365.roa
File:                     56fc6943-2e48-3f51-b3f9-60fb5a1ec365.roa (raw, json)
Hash identifier:          WRYTddboBaVn6lMqvSJ5Ss8sFSmO6N6vK8id4aSd5sg=
Subject key identifier:   BD:A2:A0:B7:15:0A:C5:CC:AE:28:5A:D4:DC:16:B0:30:91:1F:F2:C5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85F95EA8F0BA4734EA3CCC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56fc6943-2e48-3f51-b3f9-60fb5a1ec365.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63296
IP address blocks:        128.177.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:95:ea:8f:0b:a4:73:4e:a3:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=e083d2fc-1b11-43ee-bf98-d12c00e7b063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:6f:3d:1d:bf:a7:01:4d:0e:18:da:28:9b:
                    0e:fd:fe:76:fd:d8:9f:e8:15:17:4f:80:67:8f:6e:
                    10:1b:89:c8:31:6e:f6:71:7d:64:0d:62:fe:4a:ff:
                    d4:30:19:1b:b1:b3:e9:d9:b2:05:fa:36:57:0e:07:
                    f4:8c:c1:f4:ea:d2:81:2d:53:c2:de:7a:cf:c5:0e:
                    c9:73:18:c3:38:b2:3e:24:0c:ac:ea:fd:3e:e5:3f:
                    25:30:5e:3d:03:75:c7:8b:6a:59:97:6d:4f:6d:7f:
                    3c:d8:38:31:cd:ae:bf:af:e1:6f:36:5c:52:b2:49:
                    fb:37:5d:ff:06:50:ac:12:5e:0c:f8:a9:21:72:bb:
                    ba:40:7f:11:fb:37:08:60:65:e8:5d:b0:f7:ef:74:
                    74:a7:96:bf:ab:a1:9b:4a:9d:58:73:d9:b7:dd:0f:
                    2c:6d:54:9f:4c:72:83:4c:c4:fe:65:07:ad:b5:1c:
                    db:4b:42:d3:7b:32:d1:ac:f4:ed:a0:90:eb:61:27:
                    d4:62:33:7e:91:16:8f:b8:e2:5a:4a:19:fb:2e:ae:
                    a8:fd:7d:c8:2e:be:d7:f5:33:94:a7:52:d2:a1:50:
                    c3:4e:76:e9:28:26:f7:b2:3e:eb:6a:34:f2:fe:1d:
                    81:58:83:11:56:35:90:89:8d:b8:f4:a1:d2:94:8b:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:A0:B7:15:0A:C5:CC:AE:28:5A:D4:DC:16:B0:30:91:1F:F2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56fc6943-2e48-3f51-b3f9-60fb5a1ec365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:64:5a:f1:6a:90:ef:01:40:1e:31:ca:20:3a:9c:4b:7b:00:
         d1:14:b0:2a:d4:a3:4d:7d:4d:5e:59:75:70:a0:6a:75:8d:b3:
         0c:75:f8:c9:f5:43:10:a7:40:f3:b8:1b:43:13:97:78:d2:86:
         cd:2a:72:a6:2a:ad:1b:d1:4e:0d:12:bc:0d:0f:25:22:fb:f4:
         07:7f:9e:6b:4e:b1:5f:39:be:ad:70:16:78:01:ee:6f:66:92:
         43:4c:60:d1:20:f3:1c:ff:b3:dc:da:06:9c:24:3e:93:74:46:
         08:9d:ad:6b:9e:97:f4:2f:c8:c8:af:a9:6d:ce:f8:ea:f7:fb:
         dd:24:0f:fe:84:05:02:3a:86:30:aa:81:5e:48:b8:20:42:77:
         6a:ba:ad:60:ba:0c:0e:1c:fc:d2:8b:f1:2d:2f:8e:17:b9:d1:
         dc:4e:bb:3f:b0:2e:51:96:a1:27:7b:62:cf:41:f3:c9:a9:3b:
         d8:0d:95:22:15:25:db:9c:3c:14:2e:7c:65:10:2f:a9:a9:96:
         fc:72:b5:a1:8b:5e:e3:fb:75:bd:08:55:0f:51:48:5b:f0:bd:
         dc:b6:36:d3:47:b7:8f:a4:0f:fb:b5:b0:f0:4f:cb:e7:69:9c:
         46:f2:e0:7e:75:3a:49:97:61:51:33:09:a5:b9:39:94:aa:f0:
         8f:aa:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:41:24 2025 by rpki-client