Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa
File:                     1645e6e4-ee74-38eb-8728-ce4175262d98.roa (raw, json)
Hash identifier:          g96pzDlCxBwQzkODC5x3m7089eS+Dx15A5+yTvH1HaA=
Subject key identifier:   4B:A7:67:F4:46:85:FF:A8:3A:F7:B7:E0:88:1A:D5:1D:FB:EF:F8:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849B9A9FB17CAEF911BD6AC3750
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     3855
IP address blocks:        199.172.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fb:17:ca:ef:91:1b:d6:ac:37:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=6578cb94-ecd2-4c2c-9684-0ca422a8806c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:ea:98:b7:b2:6a:42:45:0d:a3:63:82:f9:
                    fd:cc:61:2b:c0:39:ab:6f:39:b7:85:48:bd:73:12:
                    bb:41:7e:b5:7c:aa:67:ea:ce:0c:aa:83:03:41:82:
                    1b:da:25:d8:08:d6:b0:31:5e:c7:b4:f9:cc:2b:76:
                    20:4e:1f:fe:d9:12:4b:b4:00:31:aa:b3:e9:43:e7:
                    46:f1:0c:42:c4:aa:55:f2:72:ff:e2:d3:41:10:e9:
                    53:1a:de:ed:4e:cb:bb:3c:f4:70:23:f2:b0:14:8f:
                    f8:62:d8:9d:fe:f9:bd:94:0f:1c:6f:42:c3:6a:ea:
                    6f:fb:39:04:2a:54:8d:e6:0d:0a:15:81:09:e8:59:
                    ed:49:ad:77:87:cb:df:89:76:d4:2e:21:b3:a4:fe:
                    cf:f4:68:7b:df:06:24:86:8c:7f:f0:45:54:92:3c:
                    2c:8f:c5:b7:8d:29:12:ef:a3:df:24:06:4a:6e:a9:
                    88:ac:30:1d:e3:71:19:79:f8:ca:c9:65:65:21:ff:
                    22:27:72:41:67:f8:86:1a:2b:6a:e4:0f:ad:b1:79:
                    86:3c:3f:dd:5e:7a:1e:77:f2:db:f6:2c:8f:16:13:
                    7d:32:0f:8f:af:2f:fa:6b:bd:67:f5:4f:67:53:52:
                    3f:50:b3:20:2d:21:e7:51:95:62:97:48:46:c7:02:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A7:67:F4:46:85:FF:A8:3A:F7:B7:E0:88:1A:D5:1D:FB:EF:F8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:57:07:cc:49:80:64:ba:89:2d:da:f4:48:dd:22:fb:ee:18:
         e8:f9:90:e3:62:cb:06:96:e2:68:a7:50:90:fb:50:3b:f6:56:
         f2:25:50:15:85:09:85:1c:a6:eb:8e:68:85:6b:ee:28:70:4c:
         68:dd:ee:15:1a:71:cf:4f:65:41:0a:ac:5d:e7:58:b8:e3:74:
         1e:9c:4c:01:62:5a:7e:6b:8b:e5:10:0c:3c:cc:ae:9f:52:ee:
         dd:9c:77:97:54:be:64:53:b4:ae:f8:b9:5b:6c:f6:9e:37:5e:
         9e:81:58:90:e9:45:fc:f7:a5:77:84:4c:09:cf:ef:96:bf:d7:
         be:35:54:e1:28:f2:d9:b0:22:05:9a:cc:20:7d:c1:f7:44:6a:
         70:6b:9d:20:b5:33:86:09:f4:0b:d8:f7:d1:e8:8d:20:f9:7c:
         ee:c6:bd:c4:40:3a:76:95:5e:f8:f3:f5:89:44:50:33:60:2b:
         d9:84:5d:47:c9:06:66:5d:0b:d0:66:cd:89:96:2d:f3:f6:28:
         84:76:3a:8a:9f:8c:cb:62:d1:29:3c:7c:7b:72:ed:bf:87:e8:
         9e:3d:e0:d8:2b:39:ab:28:ed:e7:79:90:c5:e0:00:b6:98:5a:
         55:32:5a:31:f6:ce:47:2d:07:5e:42:b6:43:30:1c:74:94:07:
         e7:9c:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:28:18 2025 by rpki-client