Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa
File:                     54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa (raw, json)
Hash identifier:          Yk9iot9B/yMu4Yz8kbQPy2kYgVKRhuzmPGUpl9IQA9M=
Subject key identifier:   C4:FD:56:35:F3:E7:EA:D6:B0:7F:7E:26:18:86:D3:45:C9:F3:0F:E5
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A268ABE30FE7EF9CE681ACB80
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     33208
IP address blocks:        64.18.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:be:30:fe:7e:f9:ce:68:1a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=691b3aad-3df1-4042-bea1-2a5a4b2cf749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2a:8a:4e:4e:4c:05:ba:a4:9c:e5:2d:af:80:
                    e4:23:37:0b:62:22:e6:4a:1f:0a:cb:64:45:53:10:
                    c0:82:07:a9:15:db:a8:62:96:1d:d3:45:b8:b6:3d:
                    ca:98:31:dd:22:3d:bb:c8:77:a4:3f:e8:dc:fc:03:
                    67:aa:b8:e7:87:38:3a:eb:e6:4e:81:8e:0a:7b:44:
                    a4:8e:ef:e0:14:1f:b5:c8:22:df:ca:97:1e:f9:dd:
                    aa:08:5f:1a:e7:ac:74:de:b1:4e:42:77:ac:13:6f:
                    0f:01:cf:38:5c:b6:fe:ba:8b:0f:db:92:8c:09:03:
                    38:6e:d4:5c:2c:1d:bb:ae:e6:ea:dd:52:7c:0b:8f:
                    36:0a:e9:e1:5a:42:a4:50:17:d2:77:d5:b8:62:34:
                    23:5d:d3:ef:d8:8a:a4:8c:ed:01:9a:a3:2f:1e:47:
                    57:d1:0a:4c:35:4c:eb:68:3a:88:ad:2d:aa:93:bc:
                    fb:c6:29:62:ac:b1:2c:76:0a:f0:af:38:e3:4e:86:
                    08:4b:bb:c4:d4:ac:53:1f:90:11:a0:95:d8:f0:53:
                    42:e0:9f:d8:e6:63:08:66:a2:26:31:d6:60:0f:45:
                    5f:31:40:bf:d9:a3:9a:62:12:c5:de:16:b6:1a:04:
                    ad:d8:f7:b3:11:45:08:ff:a2:38:95:26:43:bc:c9:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FD:56:35:F3:E7:EA:D6:B0:7F:7E:26:18:86:D3:45:C9:F3:0F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:dd:b2:2e:f0:b7:cb:ae:e9:fe:b0:bb:77:1c:15:30:53:
         5a:bc:5c:39:ec:10:41:16:16:cb:c6:38:aa:98:59:07:39:3e:
         ce:b0:d1:ff:5d:dc:88:49:ef:6f:d7:52:72:46:7d:08:d9:c1:
         9b:90:85:38:ba:24:a0:32:25:83:ec:dc:13:cd:8a:86:3f:09:
         c2:6d:b8:de:87:7d:c4:0d:3b:fa:2a:a5:85:76:6d:92:66:e2:
         6f:20:c2:39:e9:eb:9d:e1:98:50:27:5d:d9:cb:06:ee:d2:9f:
         68:e2:2a:c9:47:32:3e:cf:8f:47:77:56:c1:cc:83:e7:ff:b8:
         43:71:e1:ad:b7:67:5b:8a:85:01:eb:0e:51:b5:b5:7a:eb:bc:
         f4:2b:22:ab:04:c4:7d:7e:c3:0c:c1:d7:b2:18:1e:c0:af:79:
         9d:b9:aa:42:7a:0f:69:9f:10:ee:61:f3:7e:cb:ea:cd:da:d4:
         54:ba:ef:c0:7b:de:17:64:ad:52:c1:8d:a0:34:8c:6e:58:56:
         16:58:82:70:cf:68:b9:34:f9:7b:b3:1d:32:5b:17:dd:e1:a9:
         69:25:7b:da:3f:3a:71:35:9a:06:0f:fa:0c:f5:1f:ce:b8:73:
         98:88:3b:de:45:f1:f5:a7:c5:8e:c1:c4:c5:5c:71:36:41:91:
         d9:33:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:17:08 2025 by rpki-client