Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e2398531-5f7e-3b17-8134-67fb830d6611.roa
File:                     e2398531-5f7e-3b17-8134-67fb830d6611.roa (raw, json)
Hash identifier:          DJp/BAx4XQuMaS6RkRbDmVtAkC8BDsfzdOx/YysokYM=
Subject key identifier:   6A:33:E2:C6:0E:61:43:56:D4:9B:B7:29:5E:B5:1B:A8:3D:2B:A6:D6
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A5FC5D096931E7CBABDD1E9A0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e2398531-5f7e-3b17-8134-67fb830d6611.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        192.77.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:d0:96:93:1e:7c:ba:bd:d1:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=f707d800-849f-4147-95ea-7ba124764561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:8c:f3:46:a7:e8:6a:e8:9f:9f:a7:f1:b0:
                    dc:f7:e0:7a:b9:61:27:14:fa:4f:09:23:e9:8b:66:
                    32:86:ac:86:f5:1e:30:43:c0:76:53:7c:b4:e2:f6:
                    59:dc:84:cd:db:43:cb:0f:33:42:cb:be:fa:4e:8f:
                    be:57:71:d6:64:0c:1c:d7:6d:64:56:d8:3c:8a:15:
                    2a:30:ca:0b:55:01:95:12:9c:2f:3b:62:bb:49:b3:
                    d4:7b:7a:51:5a:c7:ad:f8:83:bd:11:94:c6:4a:cc:
                    2c:4c:bc:8f:82:8c:45:97:82:72:90:35:8e:b5:18:
                    46:b0:e3:0d:2f:12:41:1a:70:11:32:c6:17:73:a5:
                    f3:ba:ad:44:92:54:2f:4b:67:96:05:27:f7:f7:a9:
                    42:7b:0f:27:48:fa:bb:48:09:da:07:61:cc:1c:c3:
                    fa:b7:fd:3b:54:9a:dc:4a:e1:a6:7c:6a:21:0e:c1:
                    4d:0e:60:83:ff:60:af:15:7c:f1:22:54:ec:86:e1:
                    6f:8f:c8:12:d6:e1:87:13:bf:76:c3:05:bd:7c:c7:
                    17:6b:31:49:df:1b:55:fd:c8:48:e7:0b:13:90:bc:
                    f3:a5:71:9d:03:e0:2e:c4:75:a9:46:23:9c:fe:82:
                    f6:1f:f3:df:f1:f3:6a:6e:78:9a:bb:69:19:eb:4b:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:33:E2:C6:0E:61:43:56:D4:9B:B7:29:5E:B5:1B:A8:3D:2B:A6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e2398531-5f7e-3b17-8134-67fb830d6611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:d4:8f:52:82:b1:f5:79:07:79:f1:6e:7b:13:89:9b:f0:
         f2:3a:48:70:ca:db:9d:b4:a0:78:ee:8e:c7:2a:27:3b:98:8b:
         48:4b:8d:78:9c:b8:77:8e:40:4b:e6:47:21:be:82:e9:8b:0d:
         2d:b8:bc:33:b9:cf:81:01:e7:0b:04:2a:20:47:ce:0c:c5:3e:
         fa:de:79:cd:bd:94:61:28:0f:e5:65:79:ad:bc:72:81:bc:c4:
         df:76:a8:07:0f:13:07:43:77:c8:0d:e6:ae:02:ec:55:6c:ee:
         93:94:f3:30:f1:e5:db:ef:c4:c3:e2:e4:ae:1a:5b:28:90:76:
         80:ea:9f:6f:16:ba:fb:f4:0f:90:d8:49:52:1f:20:58:5e:a2:
         36:a9:21:39:d1:62:33:cb:f3:5f:97:de:7d:0e:cc:4d:67:4c:
         68:1c:68:11:fc:86:cc:b4:7f:89:94:fc:68:ef:da:d5:f3:d0:
         bd:b1:1b:c6:f1:6d:2c:e1:73:a3:b1:fb:d6:7b:8c:5f:aa:68:
         8c:50:b9:70:06:00:d0:7d:71:09:7e:a1:c9:b4:4d:f6:1c:ae:
         90:a7:15:10:8d:7d:f8:68:21:5b:47:04:ae:8f:c2:74:30:ef:
         6a:fc:0d:b9:39:bb:12:14:dd:82:46:eb:78:85:05:be:c3:ee:
         33:59:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:45 2025 by rpki-client