Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
File:                     f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa (raw, json)
Hash identifier:          8vSWIxrKCXSoVpTAJY5eGo1tIBY3ijmXLJsQqRzXCQo=
Subject key identifier:   2C:99:70:E3:88:88:41:49:F2:0E:2C:2F:AA:CC:D3:09:FF:90:B5:07
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F4328584A4AD58ED4E17EBFBDF8B36F00
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     63018
IP address blocks:        199.59.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8e:d4:e1:7e:bf:bd:f8:b3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=676b495a-b7fc-485c-b8c6-01d656964e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:7b:e1:6c:96:a4:ed:25:dc:dd:d4:60:e6:
                    e6:88:74:27:88:f4:fb:f7:43:10:b1:3e:3d:28:60:
                    91:e5:44:6c:87:67:39:d6:1e:ec:cf:ef:a5:f3:b9:
                    83:f6:09:6e:39:d7:28:34:2f:55:4d:39:a8:96:c4:
                    a1:29:5d:29:65:b9:17:a4:f6:96:01:f9:3e:be:fb:
                    28:0b:03:5e:c5:5f:bd:a7:dc:eb:f7:6a:ba:c0:a4:
                    70:2a:b1:d6:8d:57:5d:21:e9:39:aa:14:06:6b:87:
                    8d:8c:01:32:ca:07:46:eb:40:1e:aa:9e:44:5e:6d:
                    b4:d0:b8:2f:73:79:da:cf:35:fc:58:20:53:f2:4e:
                    7d:7a:5a:2b:23:f5:75:42:0a:a6:5f:9c:b7:11:84:
                    75:a7:0a:82:98:64:76:dc:ee:46:70:7f:46:f3:60:
                    2e:13:e7:fb:2c:cc:ca:c7:21:46:d8:60:69:0a:ac:
                    cd:ee:97:a5:4d:f5:7c:e3:99:b9:f0:e9:04:3c:a2:
                    db:95:60:88:82:c5:13:c9:a1:ae:cb:cd:9e:43:58:
                    52:be:3f:4f:3d:03:c3:ed:c7:4c:2b:87:2d:06:93:
                    3d:c7:16:e6:25:a3:0b:df:57:03:68:89:7b:74:f1:
                    a9:b7:bf:38:e0:84:c3:f1:66:b5:18:55:3c:a5:1d:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:70:E3:88:88:41:49:F2:0E:2C:2F:AA:CC:D3:09:FF:90:B5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:d3:10:43:b8:21:66:70:d6:67:98:1f:3b:ba:44:de:38:
         6a:a0:a1:a8:3c:8b:d0:3b:5b:43:29:04:97:8a:73:5f:30:98:
         5e:20:29:b4:3d:2f:f1:37:fa:03:bc:a9:ca:b3:aa:3f:3d:0e:
         8f:11:66:1d:3d:d6:d1:be:42:2e:39:4e:45:63:ac:7a:34:bc:
         87:c6:f1:cd:fb:5c:c4:e4:4f:ba:2d:d7:b6:0e:32:6a:ef:50:
         de:f6:7a:eb:45:3a:4e:7d:d0:f1:da:79:88:66:96:0c:d7:b0:
         86:44:44:43:4b:c9:2a:08:26:ba:07:b2:f6:10:28:fb:36:e2:
         23:eb:57:7d:d9:19:d1:1f:77:5e:d7:ef:f8:a7:ba:f3:98:a0:
         11:8b:80:24:33:c6:42:3b:ab:36:b8:26:1a:e1:3e:5b:4c:38:
         75:42:b2:5c:d3:6d:d8:09:21:14:d6:60:ff:d1:f4:17:7e:fb:
         54:5b:96:3e:01:bf:7c:b4:dd:c8:ff:9b:9f:05:ef:5f:54:06:
         b4:96:cc:9e:59:41:43:d1:bc:cc:e7:69:99:a4:15:cf:67:ca:
         51:1c:18:b4:28:6f:ec:53:71:6d:91:15:7c:6b:a9:51:e3:07:
         2b:49:5a:12:b5:64:8b:57:a3:42:cd:d3:1d:25:d6:ba:94:71:
         eb:16:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:41:44 2025 by rpki-client