Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa
File:                     c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa (raw, json)
Hash identifier:          nxCQhzZfiwkMkhn4kD02QGEprsVHPEN0Ftp/56RShLU=
Subject key identifier:   78:CE:D7:66:75:55:12:52:9D:45:E8:15:E4:4D:61:FD:4C:52:47:0C
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F43285849EA8521E7A60B4621E60A20A0
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     30041
IP address blocks:        207.171.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:21:e7:a6:0b:46:21:e6:0a:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=19e0f3b8-7ebb-4237-a2e1-575bfa329d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:d5:b0:b6:f8:df:1c:15:11:d9:cd:2c:a4:
                    f3:ab:70:97:50:66:c4:83:4f:c1:05:94:f7:73:a1:
                    c9:2d:f6:af:9d:bc:66:d8:b1:1f:bf:8d:76:bd:d8:
                    cf:60:de:e4:78:73:5a:03:37:27:97:09:16:cb:8e:
                    26:fc:58:e5:e4:8f:4e:ef:cb:dd:55:25:9c:05:17:
                    ce:d6:c0:9e:1f:d3:8e:e3:40:c2:d6:5e:42:e1:f6:
                    f6:18:46:12:e7:c8:9d:35:21:87:08:08:f1:33:5d:
                    2f:54:eb:e5:8c:e6:40:22:98:bf:de:08:50:16:3a:
                    93:02:9b:68:2a:50:bd:b2:6e:1d:49:3d:79:f4:0b:
                    ea:eb:11:b0:31:42:9d:9b:8e:d4:67:c5:61:24:c4:
                    cf:cb:b4:0f:a7:54:85:a0:3d:de:eb:1b:30:28:9f:
                    58:b8:5c:95:d7:17:f5:0f:85:cf:dd:0a:2f:69:ca:
                    c1:80:a2:f7:a8:8e:e1:7d:3c:1d:e7:7b:d1:3c:0d:
                    d9:ff:88:88:04:d9:e6:9f:f2:49:6e:4d:e1:41:e5:
                    fb:d7:3a:78:f1:2d:b5:e3:de:e0:37:cf:17:90:51:
                    aa:e5:c7:ab:73:93:95:6a:0b:b8:19:9b:b3:87:7b:
                    be:cb:3d:e3:22:76:83:4a:1c:a2:e1:f7:b1:82:e9:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:D7:66:75:55:12:52:9D:45:E8:15:E4:4D:61:FD:4C:52:47:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:af:ae:41:5a:c9:42:df:72:bd:dc:38:c1:e5:44:50:16:
         d5:54:6e:ae:63:6f:c4:34:5f:fc:3a:e0:ef:99:fd:50:e6:84:
         b1:bd:32:a6:94:97:93:e1:9a:71:73:08:a3:73:14:e4:37:7b:
         48:ad:a1:57:f3:eb:ed:76:dd:f2:ae:37:5c:23:66:55:bd:29:
         58:88:86:05:24:f6:fc:eb:24:42:f3:45:b9:ef:f5:3d:7d:b2:
         8d:0a:b4:f3:79:b7:b6:49:25:78:ab:55:13:fa:d1:22:a6:f6:
         da:dd:47:a0:6a:5d:b0:0d:eb:10:9a:bf:ae:c7:ce:30:dd:5d:
         e2:bc:eb:a7:85:17:54:fe:05:2c:d6:1b:78:2d:85:ae:5c:37:
         5d:b2:4b:22:c4:2d:38:6d:39:18:c4:64:cd:54:ab:13:56:7b:
         e8:3b:1f:de:6a:d9:97:cf:b1:f6:3d:f1:32:c8:ef:7e:84:ea:
         e0:b9:c0:9f:8a:c2:c9:fc:40:36:0d:c0:0f:d5:c6:83:6f:6f:
         b0:0f:10:84:98:9f:2c:83:0e:71:36:ff:8f:41:50:7b:d5:4d:
         68:f7:08:ca:60:d7:7a:5e:76:e3:2a:b3:94:82:79:16:a9:7b:
         63:56:1a:e4:ad:d7:7f:a0:79:1f:b4:22:eb:27:50:6c:c2:7b:
         5f:66:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:03:32 2025 by rpki-client