Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa
File:                     5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa (raw, json)
Hash identifier:          JsA/MsShL0WLAM4xf5R+8Lm35kePz1WGUHxEpMTou94=
Subject key identifier:   2E:3B:DB:67:63:30:E2:A5:0C:0D:9D:03:48:54:D1:CD:D6:EF:28:68
Certificate issuer:       /CN=44a262a0-ec38-457a-a9b1-90c85c56209d
Certificate serial:       010D0C9F4328584A35E588074BCFEF13F9788980
Authority key identifier: 04:59:0B:80:84:4A:74:19:2D:A1:C2:12:32:89:7C:6C:CC:A5:2E:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     30614
IP address blocks:        132.237.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:88:07:4b:cf:ef:13:f9:78:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a262a0-ec38-457a-a9b1-90c85c56209d
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=d4783653-fa2f-4d19-a3fd-7c096c94d451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:b2:c0:e9:45:bd:6f:40:8d:d1:40:89:38:
                    69:74:69:36:0a:db:e3:4e:22:75:1e:da:fd:e4:60:
                    de:e3:a5:3f:dd:a6:e1:54:60:4e:0c:4d:88:93:d3:
                    39:9b:dd:78:2a:2d:7b:69:e7:46:ff:8f:d2:5d:a8:
                    6d:fe:c0:6b:84:95:95:7f:8d:f9:85:20:a4:c9:d5:
                    dc:71:d2:98:03:0f:4d:17:98:d5:0c:f7:20:c2:4f:
                    97:90:41:6a:0f:dd:04:39:ce:13:d9:0a:58:52:65:
                    14:2f:f5:6d:5e:47:2f:96:87:02:be:de:ca:7d:6a:
                    1e:0f:d8:11:d0:e4:22:3d:e8:53:ea:49:29:81:6f:
                    a8:92:cf:e6:20:23:6f:ba:80:cb:cd:fa:a7:1e:7c:
                    c5:11:73:c0:7d:a8:ba:ff:bc:99:9c:36:a5:4f:59:
                    be:53:7a:2a:60:ad:a9:17:2b:ba:c0:9f:f6:f6:9a:
                    47:d1:ef:58:68:d1:c9:54:9e:11:5a:e2:94:03:0d:
                    07:56:d7:f9:2a:85:c6:2f:e6:56:9d:c9:31:37:fa:
                    c5:84:d6:c1:20:b2:87:6b:ef:11:d6:3b:1f:90:4a:
                    24:32:f5:a8:c4:94:96:da:05:8c:47:65:d3:68:fe:
                    60:fa:1e:75:af:80:50:14:1b:15:1d:cb:b0:14:57:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:DB:67:63:30:E2:A5:0C:0D:9D:03:48:54:D1:CD:D6:EF:28:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/5c6cfca4-539a-3e71-ac9e-5a4b3c0bb52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.crl

            X509v3 Authority Key Identifier:
                keyid:04:59:0B:80:84:4A:74:19:2D:A1:C2:12:32:89:7C:6C:CC:A5:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.237.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:13:61:ac:30:d2:2a:6e:b3:50:cc:37:b3:a0:e7:52:91:9e:
         f5:f1:be:4c:c5:55:f3:54:5d:3e:32:31:d3:b3:70:97:64:c8:
         cb:de:83:96:25:56:23:93:17:01:f2:ca:35:9d:e1:06:f8:33:
         37:dd:81:d4:b2:92:4e:c2:3e:f6:05:8f:af:83:4f:d5:65:df:
         15:d7:9f:7f:18:26:a4:eb:ad:87:ab:71:00:53:4e:b2:04:c6:
         7f:db:d6:e1:6b:8d:e7:34:3f:62:0f:da:f1:c9:f4:64:41:df:
         03:00:1b:a5:db:85:c3:8e:5c:d0:c0:d4:0b:16:1d:3e:c2:5e:
         65:51:82:72:9e:4b:e9:40:aa:f3:d5:c4:1c:07:8d:26:7d:f4:
         b7:b3:6f:8c:2d:cf:69:3c:90:84:60:88:01:f7:c1:0b:8b:3c:
         55:bb:d6:cd:4a:9f:34:c3:a3:fd:d6:ce:00:72:5a:45:5b:d5:
         a0:7a:b4:8e:46:48:e5:36:78:38:18:75:e8:c9:64:06:e2:4f:
         c6:0d:1c:5c:ea:6d:a8:78:bf:cc:ff:61:36:b4:79:d3:ff:76:
         b5:74:c9:37:ff:7d:a9:a0:35:5a:27:55:33:fc:18:fe:14:07:
         bf:19:71:58:f8:f1:ac:7b:e8:93:31:56:32:85:64:aa:d4:5b:
         0d:58:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:42:07 2025 by rpki-client