Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa
File:                     1f24da68-4901-3e47-aaf8-489871d7814d.roa (raw, json)
Hash identifier:          0MQI2m7lVxAibivQ3YW3TmrdPg4EK6a73Wyt9mp/rBs=
Subject key identifier:   F3:D5:0D:1C:11:A0:47:83:52:99:85:B8:06:75:FA:1C:96:10:69:DE
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328584A4C3B10165426F02C53C6EDC0
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     15038
IP address blocks:        135.84.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:10:16:54:26:f0:2c:53:c6:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=b0b86588-174e-4512-96cc-2680887e5c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:aa:b7:a1:d7:17:ad:fb:48:aa:80:52:d1:
                    0c:bc:4e:9f:5e:01:07:d2:74:f0:1c:5e:5c:5d:06:
                    ca:d1:ac:80:33:ea:37:67:8f:1c:22:83:a0:5d:8d:
                    f6:e6:ec:ec:e2:3a:b2:c1:b7:43:70:01:86:97:6a:
                    f6:cd:9c:a1:4c:d3:97:92:82:23:02:34:ca:40:8b:
                    12:28:b7:ba:17:ca:de:69:dc:f7:f3:48:d3:3a:0b:
                    e4:a0:3e:0b:32:c6:53:08:7a:b9:34:3b:3d:d3:a8:
                    79:ef:2f:65:a6:8b:45:89:4a:da:77:33:61:20:e7:
                    5c:44:53:03:10:28:66:96:bf:f3:91:8f:1c:2c:02:
                    f4:5a:51:f4:10:f0:45:06:89:f2:c1:44:7f:97:07:
                    57:20:c8:18:18:98:4b:32:21:b4:ab:eb:b5:3a:7c:
                    4a:a6:97:79:f0:76:0c:e9:e1:58:93:9c:5e:4e:90:
                    95:cc:ff:45:c6:02:dd:5e:2b:c7:fb:4c:e6:2d:bf:
                    83:be:f9:f9:19:be:d6:db:94:8e:f0:17:1c:69:0f:
                    cb:f9:49:95:d5:6e:96:52:fb:26:c8:8e:30:fd:c4:
                    d3:87:32:cb:0f:6f:bd:e5:0b:a8:10:a3:10:3a:5f:
                    4a:d2:ef:7e:2e:22:33:1c:d9:c8:03:23:50:e2:86:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D5:0D:1C:11:A0:47:83:52:99:85:B8:06:75:FA:1C:96:10:69:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:04:6b:86:e8:01:b0:ec:98:50:97:ac:98:02:84:3a:65:
         fa:53:26:93:c3:f1:34:ff:1a:5b:c1:8d:e2:84:fd:c7:c1:c9:
         13:d5:82:b5:4e:51:97:20:02:e6:08:7a:3e:f7:88:71:43:a6:
         7a:26:6d:27:ce:9f:55:fd:27:76:2c:25:ac:f3:77:d2:91:6e:
         e9:9a:93:5b:d8:73:8a:e4:22:18:38:e9:b4:c2:cf:5a:ff:eb:
         2d:51:3d:f0:d4:cf:53:33:b3:e4:e2:19:16:c8:c3:69:ef:ca:
         63:aa:a8:62:cb:4b:d4:38:86:b0:46:04:39:33:b6:60:06:6a:
         13:80:bd:a1:7c:f8:bc:34:ee:89:98:13:f3:06:06:76:6d:00:
         9f:d1:64:ed:d6:5e:57:58:12:82:79:52:e5:d7:1c:e1:82:65:
         68:d1:dc:ce:3f:da:b2:a8:e7:e7:7e:04:a7:f9:14:6f:27:46:
         39:a0:34:e9:e3:dc:78:09:3c:f0:42:01:84:22:c8:64:ef:d5:
         ed:b1:9c:a7:a4:f1:73:c4:00:09:10:5f:a3:0e:32:03:13:5f:
         2a:84:60:94:3c:92:f8:6e:f0:86:f4:1f:6e:51:b8:04:5f:c8:
         3a:34:8a:ec:58:ce:d5:56:82:bf:86:6d:50:7d:62:c1:6c:78:
         10:4e:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:37:29 2025 by rpki-client