Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
File:                     c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa (raw, json)
Hash identifier:          K6DqDdJnhcf/oA2/SQVlyxZpEo89XPGxj2YH6If+gvY=
Subject key identifier:   FC:06:C8:5F:8E:7B:94:C4:06:84:2A:B5:3B:90:23:48:8D:9B:71:F9
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F43285849E7BA76A6143A5A17C107C880
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     53856
IP address blocks:        142.202.116.0/23 maxlen: 23
                          172.110.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:76:a6:14:3a:5a:17:c1:07:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3adffbfc-3ccb-41df-9445-52caed7e5012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:70:b4:5a:10:2e:9f:47:56:f6:c0:73:3d:
                    eb:4b:04:ac:27:ca:e8:ff:33:b8:5e:25:e1:94:e2:
                    dc:66:d2:c0:6e:af:32:3d:62:c2:54:1b:cb:84:3c:
                    17:ab:11:69:89:90:a2:a1:3e:7e:21:de:f6:d6:e4:
                    f5:89:9c:57:82:26:77:f3:f4:ea:3e:95:0a:ae:22:
                    f6:c6:43:e3:e8:e0:f2:5d:35:67:a6:9d:de:44:3f:
                    f0:69:95:5d:04:77:ed:e5:da:aa:c2:9b:85:1f:ce:
                    d2:6b:00:dd:59:47:9c:3c:4a:a5:ca:f2:59:9b:ec:
                    d5:52:a9:d5:75:40:94:b8:a7:71:69:3d:c7:0f:39:
                    70:a4:e0:c1:99:2f:7c:f6:48:8b:f4:97:f4:8c:be:
                    96:7f:38:40:07:03:21:7f:43:2a:6e:b8:20:f7:48:
                    dd:f7:fb:91:40:8b:1b:a0:f9:23:03:94:df:29:d2:
                    6b:d1:b8:14:ae:d5:91:ee:68:0c:b8:a7:60:a9:d7:
                    8d:3a:b5:cb:2e:14:13:67:f9:f3:01:2b:03:f8:f0:
                    84:02:85:c6:a5:b9:ff:ef:50:57:66:10:00:a8:6d:
                    7a:4a:e7:0f:57:e9:fa:43:90:93:cc:96:f2:48:23:
                    f6:c7:b9:2f:c3:d9:28:14:6f:24:7b:2b:b8:68:e0:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:06:C8:5F:8E:7B:94:C4:06:84:2A:B5:3B:90:23:48:8D:9B:71:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.116.0/23
                  172.110.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:00:d5:55:5a:9a:90:e7:45:d7:9e:43:f7:14:7b:cb:ef:
         13:a9:55:82:6f:af:e7:f7:2f:1c:eb:38:af:b0:bb:c9:65:7f:
         43:ee:c6:b9:1d:f2:2d:02:c3:c4:ef:c1:1c:f8:b6:5a:26:a2:
         81:a3:38:f9:32:0d:96:74:74:a8:8a:57:87:c1:24:d7:e0:ed:
         74:1d:cc:48:ac:93:c4:23:57:9d:9f:12:bc:27:3a:11:91:f6:
         10:88:9c:f3:59:f5:e2:07:b6:ac:b3:8e:cd:f6:2b:9a:f9:88:
         2d:98:80:67:be:6c:25:60:4d:88:72:6c:d3:c3:4a:82:f7:88:
         a5:5c:60:e9:84:a6:6f:1e:48:f4:a3:54:d4:d9:60:10:1c:da:
         e3:37:f7:ac:30:13:54:69:5b:d4:86:00:f7:8c:99:d9:a6:b2:
         3b:cd:28:24:b1:ce:99:23:f5:f1:11:05:7e:8f:b8:f4:6e:cc:
         53:7e:1c:c1:5a:f6:32:a5:9b:85:d5:58:91:49:be:ee:4c:f6:
         ab:46:65:45:fd:57:6b:fc:ec:a6:18:85:6f:aa:2e:b5:3d:04:
         7f:b0:fe:a9:80:24:d0:6f:c0:17:53:84:82:1a:ca:b3:dd:4c:
         f3:2c:52:76:cf:77:44:3d:5c:11:bf:96:cf:b4:77:63:ae:b1:
         11:7b:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:04:32 2025 by rpki-client