Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/62f02614-9cdb-3a39-a452-43e7027b67bd.roa
File:                     62f02614-9cdb-3a39-a452-43e7027b67bd.roa (raw, json)
Hash identifier:          C/9E36gy1MaSNan7/F7mlQpK/IZxScapjk1MO1qfKHA=
Subject key identifier:   66:8B:4B:5A:36:A1:C4:50:9D:3D:8A:02:B1:AE:53:0D:04:86:36:36
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285849F48F1BC33E9319DAB6E6E180
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/62f02614-9cdb-3a39-a452-43e7027b67bd.roa
Signing time:             Sat 24 May 2025 03:19:24 +0000
ROA not before:           Sat 24 May 2025 03:19:24 +0000
ROA not after:            Fri 22 Aug 2025 03:19:24 +0000
asID:                     19886
IP address blocks:        171.162.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:8f:1b:c3:3e:93:19:da:b6:e6:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 24 03:19:24 2025 GMT
            Not After : Aug 22 03:19:24 2025 GMT
        Subject: CN=acb37a6d-73b6-44a9-ad70-e98b0cf8adc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:45:28:ce:b1:92:67:47:d7:64:61:e4:c6:
                    a8:54:b6:ea:4d:dc:82:cf:7c:98:98:6c:a4:cf:7f:
                    d0:73:a2:47:3b:eb:e9:ee:09:a0:8b:be:ea:cd:74:
                    ab:ee:47:ad:a9:20:71:80:11:4d:34:de:a7:7e:0d:
                    e0:8d:03:77:f0:b0:ed:a6:57:1f:87:b7:3e:c7:0c:
                    af:7d:09:3e:de:a4:53:e3:e4:38:78:53:ba:13:24:
                    9d:6e:ef:1b:27:cd:4c:d7:62:4d:ee:c0:99:df:26:
                    6d:e6:15:34:64:42:8c:19:86:8c:b2:4b:92:2d:68:
                    06:a7:06:47:d6:b3:3e:de:84:9e:1e:ec:50:18:0f:
                    d9:7d:05:06:16:68:e8:3c:00:01:d7:1e:74:7d:d9:
                    b0:f5:ba:8a:df:99:f1:a4:c6:16:42:1d:cb:2f:97:
                    18:a0:0a:ff:29:26:d1:73:b0:bb:b9:84:f6:6e:79:
                    c6:27:f6:9f:fe:f0:7b:97:b9:71:ad:63:22:d2:5b:
                    52:7a:ef:e0:d3:1e:36:da:d7:1f:0a:56:2d:21:7b:
                    0c:14:28:57:fa:08:2e:bd:27:45:17:cd:cd:51:26:
                    80:3e:e6:09:cd:4e:bb:31:f6:62:5d:fe:dd:b2:3a:
                    56:5d:3f:ef:0a:bb:45:6f:ef:73:11:1f:b6:fa:9a:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:4B:5A:36:A1:C4:50:9D:3D:8A:02:B1:AE:53:0D:04:86:36:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/62f02614-9cdb-3a39-a452-43e7027b67bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:43:40:2b:32:e5:1e:93:de:48:70:ad:0c:02:fd:bb:02:4d:
         08:8d:03:14:87:7e:2e:83:ae:bf:ae:d7:c4:4a:d0:a2:d7:31:
         d4:4e:b9:b7:88:f7:7d:63:67:07:1a:96:13:3f:1b:64:c8:5e:
         5c:9e:a2:69:56:96:ad:7b:13:46:c6:b7:67:b2:25:c1:96:52:
         9a:f2:47:4e:8e:d6:d7:33:7f:0b:70:77:61:2c:b3:d6:f5:ff:
         81:2d:29:e7:9f:fd:ef:bd:51:5a:ee:b0:62:a4:bf:7e:af:71:
         43:8a:e9:59:97:f1:a9:52:7e:0f:38:c5:19:d6:9c:c6:06:06:
         9a:9d:c9:5a:56:53:ed:ce:37:4f:a5:55:82:a7:d5:41:6f:24:
         93:2b:c9:c2:06:2e:12:e1:6b:f7:f9:e1:22:29:b7:f1:cc:c7:
         69:b0:ac:0a:fa:96:6e:4b:4f:8e:c7:c8:5a:1a:ec:9f:14:67:
         9c:32:ae:cf:30:a4:2b:22:b1:24:4f:c9:5f:67:a0:ee:3b:66:
         d1:de:10:91:6c:5b:5f:41:72:8c:f9:44:4f:ef:86:92:61:a7:
         e0:99:25:be:90:29:c4:83:db:5c:22:23:a8:3b:1d:f3:dc:9d:
         74:ff:9f:26:15:d2:ad:bc:e6:b3:c9:be:26:4b:ef:4a:66:fc:
         f4:fe:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:33:57 2025 by rpki-client