Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa
File:                     a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa (raw, json)
Hash identifier:          gB/Qbwqnd58439qxVAGMOyQrlvi1AGUikRfh6oKhj1c=
Subject key identifier:   1E:F2:9A:5F:A8:22:60:54:F9:86:BB:2E:A7:3C:96:B9:77:37:9E:CE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85F950BC90EDB5CD8C37900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     33321
IP address blocks:        128.177.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:95:0b:c9:0e:db:5c:d8:c3:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=dee823ca-d60c-4803-95d2-807bff799f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:3b:ae:60:d0:e4:66:92:c2:61:4d:fa:11:
                    26:0b:9d:09:8e:cb:08:92:dd:4d:73:d2:ee:69:62:
                    c4:aa:73:0b:60:12:1c:18:d2:5d:89:6a:07:06:a7:
                    d1:54:d2:ee:94:26:57:84:3f:c9:99:75:1e:a2:9d:
                    bc:e2:98:45:25:2d:c3:11:81:79:bb:22:42:0f:21:
                    5e:59:a4:ef:ec:9b:71:22:ce:3d:9d:c3:04:0e:d1:
                    c5:1a:bd:20:af:a6:8e:25:dc:db:02:d2:24:c4:c7:
                    a8:b7:92:da:d9:03:b3:91:91:34:47:86:31:37:72:
                    b0:8b:83:d5:21:bc:ab:62:ea:4f:3d:49:aa:56:d6:
                    9e:3e:6f:92:db:28:2a:ba:19:40:5c:04:8c:06:97:
                    a3:60:8f:7b:5d:17:fa:75:94:28:24:c7:bb:46:f0:
                    dc:07:42:8c:24:a2:e0:f2:0a:f1:4b:c9:f2:06:83:
                    dd:73:b0:59:ce:22:c2:0b:17:e7:80:64:40:b0:1d:
                    66:7d:08:d2:32:b5:92:d0:b6:5d:aa:71:a6:0b:b1:
                    58:2a:9a:e6:0d:7b:66:5d:86:ce:30:e9:d2:cc:55:
                    16:d6:33:b1:82:21:91:2f:61:de:d6:a6:76:3d:77:
                    8d:8e:b1:89:60:1c:2a:74:4c:24:46:2a:97:03:57:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F2:9A:5F:A8:22:60:54:F9:86:BB:2E:A7:3C:96:B9:77:37:9E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:4a:65:69:a1:cf:82:35:33:16:c8:f4:ea:81:e7:f9:d0:
         ee:49:4a:e1:0a:73:9b:7e:aa:3a:a2:07:2b:ac:cb:e5:95:7d:
         0f:c3:c8:89:3f:cd:19:99:2b:b2:6a:84:46:7d:10:7b:27:ac:
         52:7f:e1:87:8f:6e:96:3b:e2:57:04:f2:58:cf:90:24:40:40:
         05:ae:5a:7a:2d:3e:8e:92:ca:97:cc:91:27:ad:38:39:33:2e:
         37:f1:de:30:77:dc:46:c1:74:3a:16:a3:7c:19:3b:44:ea:5a:
         39:dc:f5:66:17:d9:00:94:d5:06:0d:db:bd:1f:0a:21:53:58:
         ee:8b:bf:29:8e:40:35:4f:d5:bf:20:31:cb:07:b5:b7:6e:57:
         af:5c:5f:5b:34:e6:50:da:51:f2:ec:81:a2:5e:61:77:a6:5e:
         56:93:5c:a9:72:ec:da:5e:17:01:4a:f3:93:3c:c9:7f:e1:42:
         37:68:bd:12:73:d6:43:88:a4:b1:b0:94:d5:fc:d4:90:ab:bb:
         00:06:6e:c7:c1:1b:66:3e:88:6f:d6:b1:53:7e:e0:14:be:81:
         fa:4f:06:ff:e8:e0:20:e9:ca:a1:de:af:ae:5d:f5:b8:5a:9a:
         c4:e2:35:d8:f9:ad:fc:ed:70:f5:1a:c3:f1:2f:6a:fb:19:71:
         d7:24:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:34:23 2025 by rpki-client