Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa
File:                     ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa (raw, json)
Hash identifier:          bI0B5SH8djpg+/Hn8wutUMjFx+wHDcJMKfdcbnBXXwQ=
Subject key identifier:   B2:24:1E:E5:BC:3A:AC:23:2F:45:3F:14:8D:BF:62:75:85:F1:DC:A3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F91D12C2027DAB4FE8E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20115
IP address blocks:        172.222.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:91:d1:2c:20:27:da:b4:fe:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=2a53574f-de4a-45af-8b8b-7743c5b43cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:c0:19:bf:dd:76:dc:73:23:80:75:38:83:
                    87:0f:47:53:cd:7c:52:ec:f3:92:90:3f:53:ce:0d:
                    1b:15:72:b7:c5:6c:25:4d:12:82:7b:75:1b:de:7f:
                    ff:8f:4c:7d:7e:c6:b7:68:cb:ad:f7:0c:26:9d:fe:
                    61:db:80:c7:72:10:cf:a6:27:7d:86:b3:3d:7d:30:
                    15:e6:56:63:87:c8:a3:fb:cb:72:ee:05:e9:7e:17:
                    75:2b:f7:07:76:9a:d9:56:f0:e5:15:ce:0b:20:9b:
                    9e:fc:9a:bf:b3:bc:a8:2f:33:0a:18:26:17:18:4d:
                    6f:12:32:b3:a0:1f:76:c3:dd:55:65:82:04:18:ff:
                    af:2c:f2:18:07:1f:56:79:5e:55:e5:51:7f:38:a8:
                    2c:5b:2b:ae:36:e5:29:ca:3a:c2:c8:db:21:e6:75:
                    c0:5b:a3:9b:01:b0:99:38:d4:b5:bc:d6:bb:0f:74:
                    7b:f8:16:74:36:12:02:56:18:57:39:9d:67:15:ae:
                    10:99:0b:e0:47:98:40:62:ac:5f:e8:28:d4:9d:f9:
                    0f:6e:72:08:bb:80:dc:92:c9:80:1e:2c:79:e3:17:
                    d9:74:7c:b6:bc:55:d2:12:24:ae:6b:3f:06:fd:82:
                    13:fc:78:d5:1a:6c:3f:eb:7f:00:e0:37:b2:75:24:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:24:1E:E5:BC:3A:AC:23:2F:45:3F:14:8D:BF:62:75:85:F1:DC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:e7:4b:d9:90:1d:7f:ca:6a:a1:dd:0d:8c:e5:a9:66:ef:
         5d:d9:86:ed:92:1e:aa:ee:6b:dc:11:fa:77:e5:a1:16:9b:89:
         3c:3a:dc:9d:fd:26:8b:3b:a4:a3:2c:d8:26:c5:ba:dc:72:e2:
         0c:18:c4:54:c8:1f:50:ff:10:07:84:9b:ea:61:32:68:1c:51:
         a7:4a:d0:68:f6:1e:45:75:34:0c:c3:83:00:87:2c:57:aa:84:
         0b:e2:33:6e:3c:32:8c:a9:28:56:0e:44:0f:97:a2:94:75:22:
         e7:8e:b5:47:65:74:c7:fd:c3:50:a9:31:58:de:4a:cc:16:4b:
         8a:d5:cb:55:fc:c3:4c:e3:c2:e3:ae:59:9b:cf:a3:4a:52:67:
         9d:65:06:6d:46:23:d5:31:11:a9:63:af:18:67:3b:3d:e3:d0:
         7d:d1:7c:e0:03:34:f6:21:c5:67:d5:f5:9b:b4:f1:ee:30:a2:
         6b:30:38:4d:7e:e2:45:1b:e1:2b:25:2a:8f:4c:65:36:db:45:
         82:54:3b:2e:ee:6e:a7:55:1b:76:88:f9:6f:3b:e1:ad:d5:a4:
         b6:30:82:1a:18:4b:dd:a6:79:41:bb:d8:bd:4c:04:7e:cb:79:
         8e:97:9a:1f:92:93:85:9e:14:5b:5d:54:d1:b7:af:ea:ab:02:
         05:cd:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:09:40 2025 by rpki-client