Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa
File:                     1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa (raw, json)
Hash identifier:          6PBFcmKBRyqe/i/9OcQfIgEP/4Yp9YxMvwKQdbNn8go=
Subject key identifier:   C2:A0:C1:49:6E:C0:8D:8F:47:78:1D:71:22:E2:E9:8E:5E:5A:DB:0B
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584A0C055A32EFFE4EC4EEB4B580
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     53828
IP address blocks:        144.91.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5a:32:ef:fe:4e:c4:ee:b4:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=bdef3066-4be5-4741-b0e2-2812e129f6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:64:45:97:e2:1d:6f:03:93:92:47:5a:73:
                    a7:59:dd:47:d3:83:96:c8:63:1b:62:c9:fb:85:23:
                    3d:82:ec:63:e8:2f:5d:64:66:9d:d5:78:e2:1d:88:
                    3c:03:cd:87:38:05:fb:3d:58:e0:d8:94:21:17:2c:
                    47:19:d4:5e:db:40:63:e6:a6:05:cd:59:ca:8d:74:
                    76:35:f8:bd:2e:99:08:13:51:4d:43:13:89:f1:f7:
                    35:93:1a:26:bb:bd:af:53:91:61:83:82:9a:ec:db:
                    52:f8:96:48:af:20:b4:f0:31:4a:7d:ce:f4:f8:f2:
                    48:2c:27:69:92:5c:65:ab:db:1e:f8:ba:de:9b:29:
                    64:ca:17:82:a4:b2:d4:66:c4:0c:16:3b:8d:d8:7a:
                    20:c4:a9:5b:02:75:16:47:91:4a:05:5f:5c:a0:d0:
                    5f:de:6d:53:9a:d2:59:7c:12:87:7b:65:10:7e:06:
                    f2:31:49:4b:fb:7d:a8:bd:13:77:49:d5:1e:27:15:
                    1b:a6:e6:3a:9c:c0:67:da:60:2b:5a:ec:63:b7:0f:
                    a1:b2:07:f3:08:37:d6:b4:a4:8c:f4:72:17:fd:d8:
                    df:fc:0c:9d:9e:70:3d:10:28:bf:5c:bd:56:77:8f:
                    80:26:e8:b3:c4:84:a7:1e:39:a9:d1:0c:79:be:95:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:C1:49:6E:C0:8D:8F:47:78:1D:71:22:E2:E9:8E:5E:5A:DB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.91.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:aa:9f:cf:9a:ac:cd:7a:c6:e2:e2:36:bc:24:ac:45:3b:94:
         65:82:cf:c8:4f:e7:32:e4:4a:e4:54:a5:6a:b3:d7:eb:a1:56:
         59:a8:3d:ff:6a:ab:ab:5d:69:94:d6:45:6d:c1:04:94:d5:49:
         10:f0:72:21:15:53:24:f1:5b:f2:22:08:b8:67:01:89:2c:28:
         12:0a:d9:61:10:1b:ff:1e:4c:ea:89:73:d5:15:57:91:55:2a:
         b4:3d:8e:ad:ba:5a:fe:43:5f:de:72:d0:46:c7:f0:6f:66:ef:
         7d:2d:2a:a3:ed:a0:f5:ef:85:d7:ea:42:59:b0:87:df:5a:c4:
         76:27:d8:49:84:63:67:2e:17:2b:94:23:df:75:cd:de:55:30:
         ce:bc:fd:99:58:ac:62:12:1c:e6:e3:93:8c:58:68:c3:3a:b3:
         bf:76:20:c5:49:c5:1e:8a:37:30:cf:a9:a3:b4:77:d5:b9:82:
         00:b5:e0:88:f4:01:47:cb:5a:af:18:95:0e:e1:74:e7:2e:68:
         7e:45:52:6d:df:1a:24:01:41:74:b1:78:31:8f:15:fd:29:e5:
         a5:9d:67:30:86:e6:29:54:22:45:94:60:13:e5:c8:43:23:2e:
         a1:ac:30:1a:e0:c1:2c:74:a3:64:66:b4:dc:c9:7a:5c:af:90:
         86:0a:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:55:14 2025 by rpki-client