Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa
File:                     6555333b-d2c7-3512-ac66-f7eb934c3107.roa (raw, json)
Hash identifier:          4lxYOg/vxpDlsuuTukwPVrKWon7S71zZxF0nLVlIWOM=
Subject key identifier:   6E:82:90:A7:7F:99:C5:AF:6C:F1:E2:13:70:E9:85:9E:5D:47:4A:9A
Certificate issuer:       /CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
Certificate serial:       010D0C9F43285849E91FA691F68785991C80E980
Authority key identifier: 67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     18530
IP address blocks:        198.29.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a6:91:f6:87:85:99:1c:80:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=0d9457b0-39cc-4f67-9eec-7d1582bc5050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:30:9f:00:8d:26:c5:16:dd:9c:1b:2d:49:
                    59:8d:d8:e5:6b:eb:b3:16:02:da:a3:e4:f4:8d:29:
                    96:18:06:2c:1b:3e:82:65:18:18:26:bc:4c:e6:9d:
                    e4:cc:e4:7e:5d:58:20:4c:c0:cc:f6:77:29:44:58:
                    f7:17:f3:8e:f0:d4:38:42:a0:f8:08:99:aa:1a:4c:
                    29:c4:e6:df:d0:55:39:ea:a7:64:e3:e1:4d:78:fd:
                    24:79:11:b0:0e:2f:cc:5a:32:20:27:2a:3f:9e:d8:
                    4d:db:32:b4:97:03:dd:fc:9f:7c:01:de:48:9f:33:
                    3a:af:dd:ee:5c:7a:a5:43:05:a1:0e:70:86:9f:f2:
                    2d:db:db:5b:c4:f9:ac:4c:cd:87:2a:d9:92:26:13:
                    7c:99:d2:6f:57:fa:cd:8e:14:74:0d:13:ff:cd:80:
                    bd:be:43:da:5c:a7:2c:10:d0:ea:a9:c5:23:88:80:
                    57:b7:6d:1f:d9:63:70:37:06:80:0e:22:0f:1f:45:
                    7f:76:ff:52:b7:11:78:88:2b:b3:74:02:0c:17:f3:
                    6e:b7:d5:76:c9:35:fe:b4:3d:e6:50:21:5e:e3:69:
                    c1:06:f4:de:59:63:99:b3:0a:80:2b:0d:22:b1:c6:
                    1f:46:95:51:47:12:d8:bb:5e:e5:34:cb:35:6c:95:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:90:A7:7F:99:C5:AF:6C:F1:E2:13:70:E9:85:9E:5D:47:4A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl

            X509v3 Authority Key Identifier:
                keyid:67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:ed:2f:02:fc:ef:dc:bf:a2:89:0c:4f:1f:f4:cb:50:35:
         2d:91:33:d1:38:8f:ff:b1:a6:0a:34:ab:0b:8c:83:82:ed:54:
         34:ae:b9:6b:e8:7f:d2:40:85:42:53:c2:b3:ac:e9:13:07:c0:
         18:e5:e8:0c:87:72:88:1b:58:0d:ca:f8:96:90:5a:9f:5a:70:
         2a:e5:28:5c:ad:34:09:a2:2d:ac:c8:f6:eb:f9:cc:cb:18:9e:
         61:01:96:8a:2e:39:2d:48:8a:4c:52:23:f8:9d:8b:c7:8b:04:
         87:ef:4e:53:95:9d:61:4c:60:1c:c6:05:03:6d:c4:df:4c:55:
         95:ad:24:a3:b9:7a:70:76:0c:69:0b:20:fb:ae:ec:9b:43:3e:
         f6:91:d7:47:69:da:5e:b4:bc:f7:7c:46:77:35:79:d6:a8:08:
         bd:cc:2a:ef:a8:76:96:df:51:7b:bd:5b:4e:ab:27:96:86:ce:
         43:ef:67:75:5d:5a:dc:c3:3f:63:e4:b0:cb:6a:af:eb:20:8b:
         7d:99:98:fe:40:34:71:f8:f6:21:2b:fe:a0:21:b3:c5:c0:74:
         c2:c8:a9:78:08:ad:f6:ba:a0:c2:c3:ed:61:2e:50:5f:da:ba:
         6c:f2:ba:68:b5:af:1c:45:be:a8:e4:1f:29:53:11:40:65:59:
         9a:07:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:19:23 2025 by rpki-client