Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa
File:                     ca7f5317-5bca-35bb-8b76-448393a2d976.roa (raw, json)
Hash identifier:          xtAH9nlNPZiENjNwdcJetgyzaQrlcgK3JHxkQn7GFPI=
Subject key identifier:   75:34:A7:1E:CC:E9:6F:9F:7A:57:1D:E8:AD:75:B4:07:5B:30:49:A8
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584A4110568A7BAEE365AD307AC0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     12083
IP address blocks:        24.214.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:56:8a:7b:ae:e3:65:ad:30:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=d98f550f-ee91-4655-80d2-6ace72b09b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:04:c2:1f:12:77:6e:b1:9b:4c:0e:b8:3d:93:
                    83:b1:d3:6a:6e:39:d3:88:0c:21:4a:0e:46:35:0d:
                    06:46:fd:a3:5e:a6:6a:49:c9:bb:7a:0c:18:f3:b5:
                    1d:fc:76:3c:db:a8:a8:d0:1f:aa:22:eb:4d:84:be:
                    9e:16:82:70:52:15:25:cf:64:50:aa:d2:f4:04:9b:
                    d6:44:3c:76:24:34:78:1c:6f:e5:c3:01:64:73:d0:
                    c6:8d:2d:d5:b0:d5:f7:46:c2:e4:f8:26:22:25:b4:
                    79:8e:f2:99:52:b2:75:29:b5:8a:70:08:06:86:59:
                    dc:16:12:20:76:e3:ac:87:7e:5b:85:f8:79:59:84:
                    37:7f:74:f0:d6:f5:96:cb:30:ac:26:c0:ff:74:5a:
                    82:da:b8:2a:f7:fc:ee:ff:1c:64:fa:40:50:81:da:
                    43:f9:ff:f0:a3:62:26:b2:c2:ea:7c:c5:51:3f:f0:
                    09:25:8b:3a:7c:4c:d9:53:d9:6f:62:7d:2c:70:9a:
                    02:0d:ac:b8:fe:a4:90:b0:a9:5e:18:9a:7c:7f:1f:
                    2e:34:5b:74:bf:b0:a0:d7:b1:1f:55:e6:0f:bc:50:
                    a3:08:88:13:f5:a4:bc:a5:cd:61:a4:63:ae:55:c0:
                    b5:99:5c:7c:3d:04:e0:6d:90:b6:85:92:f1:7c:b1:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:34:A7:1E:CC:E9:6F:9F:7A:57:1D:E8:AD:75:B4:07:5B:30:49:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:70:8f:ee:ba:ac:4d:6b:00:55:03:d9:59:3d:09:c9:7d:
         8e:7b:e6:b6:d4:55:d0:c1:d2:fc:70:c5:81:a4:19:79:52:2c:
         78:74:60:d3:7d:16:a9:0b:73:8a:d7:50:af:d0:4b:00:4a:b4:
         a4:94:35:e7:c5:59:c4:e2:ee:d6:c7:b5:23:93:d8:7e:ad:a2:
         6a:0b:18:78:88:cc:a1:7f:26:0a:a1:3c:d0:67:7b:e8:b5:4e:
         40:ce:7a:8a:68:31:e7:1b:b4:c4:be:22:05:5f:9d:46:8d:7d:
         96:57:c0:2f:72:dc:e5:21:4c:53:0f:c4:1c:93:83:76:54:c9:
         ce:ed:52:c4:f8:65:80:57:aa:4a:d7:f2:0b:38:32:f4:75:70:
         27:26:2a:c6:57:b0:2e:fd:f6:fd:ac:3c:45:ff:96:13:35:d6:
         ac:ec:14:48:7e:a5:0f:63:3d:f7:38:c9:50:0c:e4:18:2c:77:
         3e:95:a7:43:7c:ad:84:4c:19:b5:70:0e:54:35:b7:5b:58:8c:
         c5:0c:cc:e7:fd:27:fc:d9:0e:27:d3:3f:0e:03:6e:86:52:47:
         cc:4a:f3:db:c0:5f:78:a4:4a:9e:89:95:7c:98:dd:90:13:cb:
         04:dc:8d:2b:b9:14:ff:4e:a7:d7:66:2e:09:58:35:3e:d5:47:
         f0:6b:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:39:06 2025 by rpki-client