Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/93d0ba37-26d6-38a1-b8ba-2d9e16822f0b.roa
File:                     93d0ba37-26d6-38a1-b8ba-2d9e16822f0b.roa (raw, json)
Hash identifier:          sLDMkzjTVJy1ghKJ/fosmdjeCCwgCF31hn9DYcmF5a8=
Subject key identifier:   54:4A:9B:AF:07:78:43:F7:9C:19:E6:FC:B9:F5:9D:6B:AA:77:25:32
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584A56005443941BA9A8B65B8F80
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/93d0ba37-26d6-38a1-b8ba-2d9e16822f0b.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     11377
IP address blocks:        159.183.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:54:43:94:1b:a9:a8:b6:5b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=63cc9b6f-f168-4f25-89d5-34b10cfa8f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:b2:0f:8b:0f:d5:32:e4:71:22:ae:c1:4a:
                    e2:3a:07:74:6c:1b:6f:e2:fd:89:dd:f6:8b:f2:21:
                    2c:98:8a:93:2c:1d:c2:60:b6:4f:98:48:cd:f2:ea:
                    64:6f:7d:82:98:a3:6c:48:9d:52:d3:7b:be:0e:51:
                    b9:41:e8:1c:5c:06:5c:53:1c:72:5a:83:85:8f:bf:
                    a0:d2:cd:bd:81:c4:f7:20:83:03:06:4b:66:23:e7:
                    61:24:8a:66:cb:ec:bb:d6:99:bc:8d:24:c2:80:d5:
                    5e:19:2a:76:1a:48:57:06:9b:f1:cc:2e:66:32:73:
                    6a:4b:04:82:8d:9a:4e:09:c4:fa:7d:e0:1e:ee:bf:
                    8b:9e:27:e1:29:fc:8c:e8:30:89:36:a2:cd:66:e1:
                    44:bf:ff:9d:08:13:f8:c8:86:38:62:bc:0c:31:29:
                    b4:16:fc:d3:38:54:9f:11:57:3d:ca:ef:6f:42:fd:
                    74:52:2b:a8:26:fb:c6:96:ba:13:5f:eb:f1:07:4a:
                    fd:58:4f:b9:90:fb:e1:31:06:98:28:b6:cb:c1:df:
                    3d:49:74:a1:ff:1f:d2:f1:fe:34:ef:bd:42:5b:5e:
                    70:e9:7f:f0:6a:33:38:18:8e:4b:43:62:0d:93:06:
                    5f:96:6c:73:d3:e6:12:1b:03:6a:47:9d:7b:0a:6d:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:9B:AF:07:78:43:F7:9C:19:E6:FC:B9:F5:9D:6B:AA:77:25:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/93d0ba37-26d6-38a1-b8ba-2d9e16822f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:02:3d:2b:c4:59:d8:73:a1:2d:9c:9b:35:8f:44:6c:dd:
         ef:d5:ac:04:70:9f:a0:75:79:fc:03:bb:9b:f8:0e:70:84:19:
         23:b9:4f:77:cc:ba:c0:76:6f:1d:92:58:93:5a:96:cd:0b:7c:
         3c:89:62:24:07:44:d8:df:87:4a:e5:c3:02:0a:fc:bc:17:fb:
         7b:79:11:44:19:0c:fb:0f:b2:20:1f:4a:e0:79:26:47:fb:14:
         7b:12:34:c8:a9:d7:76:7a:57:7b:97:f3:f5:05:20:a3:39:ea:
         c7:56:68:4c:66:78:38:ae:9f:7f:9d:0e:2e:8c:5d:ab:fb:2c:
         0a:24:34:db:ec:5b:bd:ed:94:f6:97:be:ca:20:76:9f:cb:17:
         39:62:f6:fe:d8:42:b3:d7:9b:8d:54:89:3d:96:30:f5:35:c3:
         d7:ba:1d:6f:5f:98:ab:74:49:1c:11:53:5b:50:27:d8:54:3f:
         d5:61:a2:ba:89:7b:94:ca:8f:24:b6:81:2d:9c:dc:ba:e2:9e:
         04:48:58:55:c0:85:90:9e:c5:76:68:7d:e3:db:ad:53:29:a2:
         07:b1:be:4a:00:12:16:ad:fa:b3:23:5b:63:bc:ac:74:44:3a:
         e8:64:1c:20:43:2b:ef:c9:a4:2d:59:e7:26:7e:a8:49:0c:08:
         36:f3:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:36:31 2025 by rpki-client