Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
File:                     523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa (raw, json)
Hash identifier:          6sIFjaIjq1Re7nykEWF4Xph6PzlInTonJvGrNXKMGJ8=
Subject key identifier:   F2:76:20:E2:57:0F:0E:91:5D:C8:3A:D8:CB:72:BB:ED:5F:89:9E:A8
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328584A5A306FFD5741227B2A9B3140
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     211373
IP address blocks:        136.175.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:6f:fd:57:41:22:7b:2a:9b:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=5464a023-db03-432e-a9ce-fa3e631218ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:0f:4e:8c:c3:eb:fa:85:c0:aa:0d:24:f1:
                    d8:e7:05:b6:37:ed:66:1a:05:63:b9:5a:71:8a:6c:
                    bb:34:ad:56:c9:b9:73:0c:8d:58:f2:6c:71:09:19:
                    6a:a6:21:43:d1:ef:ff:64:fe:c9:94:18:11:fd:3b:
                    ed:8d:f6:29:72:c7:95:27:f6:c2:bb:cb:c8:1f:64:
                    ef:1b:77:22:c9:a5:9c:7a:94:fc:1e:f6:c4:4b:d7:
                    e8:31:41:60:0b:3b:3e:f5:0a:70:5b:e5:50:f0:d8:
                    84:ee:52:37:48:56:de:2b:fb:68:08:d3:87:cf:f8:
                    7e:98:b4:67:17:60:f2:9b:ce:35:31:f7:dd:2e:a1:
                    1f:0a:36:2c:c6:ab:0c:8c:67:33:3b:08:1e:90:56:
                    df:11:b5:ba:5a:ac:f9:fa:3c:c3:ea:e8:24:e9:43:
                    eb:76:d5:95:f9:89:97:ac:1b:9b:76:31:f3:83:46:
                    7d:d0:ad:1d:ac:f8:7a:c6:29:95:93:3d:e7:26:10:
                    9e:d6:42:4a:ca:59:b8:58:44:3c:06:f6:29:13:b1:
                    22:9d:32:28:87:03:a4:d8:1b:0f:12:c9:0d:97:6a:
                    7a:da:1f:e0:26:4a:eb:57:43:64:74:a5:7e:44:70:
                    9d:68:d1:70:8f:53:e7:29:91:71:91:39:04:f4:38:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:20:E2:57:0F:0E:91:5D:C8:3A:D8:CB:72:BB:ED:5F:89:9E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:18:f2:c5:90:d7:5f:cd:b0:fb:ac:eb:d4:bc:e2:b1:b6:7d:
         bd:f3:60:96:52:fd:b5:47:41:0b:41:e1:08:04:f1:d3:68:d1:
         93:32:86:19:34:c6:d2:c8:30:19:6e:12:8e:2a:2f:b6:eb:f2:
         a3:ff:48:21:83:0a:35:66:dc:6b:14:4b:59:bf:f1:3e:dc:86:
         aa:15:0e:f1:c5:c4:d4:a8:22:e1:57:ed:84:2c:a8:34:c8:f2:
         c5:38:66:68:19:8e:35:bf:a7:1c:77:d1:bd:77:f8:b6:37:0d:
         eb:ed:72:72:ba:16:24:bb:c0:22:96:21:b1:d0:a4:1b:89:b1:
         65:b8:a0:38:b4:84:0b:62:30:ae:c6:6d:2b:c1:b5:b1:ed:34:
         25:6a:5d:28:75:b3:45:2c:0a:93:9f:78:15:0a:2c:fa:b4:61:
         9d:a0:b9:f9:82:7a:fd:59:74:54:2e:a0:42:dd:87:77:16:f2:
         76:ce:02:e6:50:ec:f6:10:71:2d:26:41:09:28:f0:db:58:c5:
         b7:3e:58:11:d2:ac:a0:89:2b:dc:d0:39:c2:8a:f5:23:e4:46:
         7c:d2:1b:d3:cf:d9:b2:4f:6f:44:af:ea:59:03:02:b8:31:d7:
         ae:04:0a:f4:2d:48:2c:cd:90:0e:2e:fc:73:54:44:ac:43:df:
         8c:94:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:52:30 2025 by rpki-client