Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa
File:                     af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa (raw, json)
Hash identifier:          1m2kHkc4XrULKZUjgzVZDDTt/zbtyCvwuRAZ+zqBnAY=
Subject key identifier:   CF:3D:C1:4C:67:23:B6:37:58:DC:BA:84:F6:43:F0:2B:EE:8E:26:DF
Certificate issuer:       /CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
Certificate serial:       010D0C9F43285849EA85202EEDB8E51CB70B0E80
Authority key identifier: 86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     132055
IP address blocks:        198.134.54.0/24 maxlen: 24
                          198.134.56.0/24 maxlen: 24
                          199.52.53.0/24 maxlen: 24
                          199.52.57.0/24 maxlen: 24
                          199.52.58.0/24 maxlen: 24
                          199.52.59.0/24 maxlen: 24
                          199.52.73.0/24 maxlen: 24
                          199.52.74.0/24 maxlen: 24
                          199.52.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:20:2e:ed:b8:e5:1c:b7:0b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=48efe500-0f23-4288-84e4-7db2fd605064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:84:e4:e3:37:ed:41:a2:e2:20:f0:77:ec:
                    72:c7:87:d9:4f:23:90:7c:90:82:88:f1:6d:15:8b:
                    e4:20:1d:16:fa:2d:99:81:7f:95:f7:c8:9d:ac:6b:
                    1a:ae:38:1e:90:d6:6c:f2:91:5d:a4:6c:a9:64:d8:
                    da:81:fc:6e:76:0e:05:2f:9b:7b:8b:b8:fc:ad:bd:
                    76:41:6a:23:b5:d5:25:c9:64:fc:76:77:31:bb:a3:
                    34:11:9a:38:5b:1b:24:4f:f1:a8:b0:c0:03:19:9f:
                    00:80:42:3d:9c:49:2c:87:4f:ae:e4:ef:d8:85:40:
                    a3:22:c2:65:2f:41:e6:d9:d7:de:85:fb:0b:86:10:
                    3b:85:05:11:26:04:86:75:c4:98:7d:af:8b:7e:6f:
                    8a:ae:cd:21:01:78:9e:96:0d:a9:b4:96:6e:5a:02:
                    a9:3a:9b:90:ef:c3:6c:a0:e7:2a:b4:89:45:5f:62:
                    a4:d8:b8:83:57:b0:cf:32:1a:4d:8f:1c:78:2b:88:
                    bf:05:95:ce:18:6b:98:cf:54:47:57:36:bb:0a:ae:
                    ff:28:03:61:69:06:79:db:5e:92:7c:be:76:1c:59:
                    f8:48:1f:9b:24:76:eb:fe:57:99:35:b0:dc:82:96:
                    a9:ac:0c:9c:8c:3b:3d:2a:12:59:4a:c0:48:6a:bf:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3D:C1:4C:67:23:B6:37:58:DC:BA:84:F6:43:F0:2B:EE:8E:26:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl

            X509v3 Authority Key Identifier:
                keyid:86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.54.0/24
                  198.134.56.0/24
                  199.52.53.0/24
                  199.52.57.0-199.52.59.255
                  199.52.73.0-199.52.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:26:5e:07:2a:be:bf:d3:65:50:c7:ca:bb:15:74:cd:22:
         6a:83:05:aa:52:38:22:e5:97:a6:46:0c:19:25:a9:ad:d9:a7:
         24:4d:d7:e9:3f:62:24:8a:31:d0:b2:b5:d5:e7:3d:7c:51:b0:
         ae:a1:92:f3:3a:51:70:5a:c2:98:39:b7:aa:4d:b0:ee:e7:75:
         e2:90:48:29:ba:dd:64:5b:5b:61:6c:eb:30:8f:1d:09:82:44:
         f5:80:89:c1:28:be:19:4d:a8:7f:f3:81:40:9f:82:d9:88:e5:
         60:20:19:a3:f8:86:a3:02:db:b2:ab:5e:2b:84:f7:81:ad:47:
         66:63:66:95:5c:cc:99:d5:55:68:b1:d6:1c:52:18:40:84:9a:
         7e:cd:d3:9b:59:df:a4:2f:23:0e:f4:48:7b:48:0c:00:24:18:
         04:49:33:f7:1c:7c:80:91:36:8d:5f:9a:f3:ca:ad:bf:6e:a9:
         e2:c2:12:1b:68:20:55:7e:ef:38:66:a7:05:db:fb:89:f4:e3:
         2e:08:57:c9:10:88:3b:6b:95:44:1f:51:c8:93:fa:9c:90:bd:
         88:15:1b:85:54:e0:5e:da:f0:8f:9a:21:b5:c1:7b:a7:c6:b3:
         25:06:5e:09:71:6d:b3:3f:fe:a7:67:37:89:8d:1f:f4:ed:6a:
         39:fa:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:30:17 2025 by rpki-client