Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/639636a5-892e-3e05-9973-ec7207475e34.roa
File:                     639636a5-892e-3e05-9973-ec7207475e34.roa (raw, json)
Hash identifier:          FgDe8AMQEIR8kzPnx12nU/rzj8GqPPSWilD/eyubOJ8=
Subject key identifier:   7C:EE:4D:21:85:CA:6D:C4:62:E1:9B:57:51:FC:6C:75:2D:DD:7B:45
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A4C3B080EAD805CBA4DADDB80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/639636a5-892e-3e05-9973-ec7207475e34.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        162.250.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:08:0e:ad:80:5c:ba:4d:ad:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=8831fb8a-1a1c-45d3-8503-bcd04203f472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:da:cf:83:3c:a6:6a:b6:d6:94:fe:95:56:
                    c4:6a:af:7f:5e:f7:8c:77:c4:e9:d8:2b:11:49:43:
                    bf:42:ec:db:b5:9f:1f:80:70:30:0d:3b:0f:2a:19:
                    07:c8:69:bb:34:5b:12:e6:c1:91:c1:f1:1f:de:c0:
                    0e:d6:75:5c:8d:37:a0:01:8d:93:ee:96:e8:5f:a5:
                    27:43:47:b3:e0:51:bc:cf:ef:5e:ba:d4:9f:b4:29:
                    ea:61:b7:d3:e0:b6:74:9a:a6:38:94:35:b4:4e:be:
                    e9:e4:a6:f3:4c:52:f4:e9:c2:52:01:8d:6c:30:46:
                    00:a5:ac:37:14:91:11:d8:14:c2:86:7d:1d:00:e0:
                    a7:7f:7f:50:e1:6a:1f:d8:58:71:0d:4a:8f:bf:ee:
                    8e:ab:30:1f:b2:21:a4:07:9e:44:8f:ef:fa:18:7d:
                    88:80:b8:88:7f:9c:34:68:a1:b9:a3:61:b3:62:ed:
                    7f:7e:e1:5e:99:8a:d1:5f:23:e5:a5:94:ba:e6:fd:
                    90:dc:4a:91:37:10:36:8d:d3:21:78:23:c9:03:95:
                    7f:89:c8:74:34:32:08:29:72:8a:eb:ad:53:1c:a0:
                    cf:5b:06:3c:dd:f0:8b:66:8a:60:e3:41:fb:ab:4c:
                    5e:4f:9d:9f:8a:ef:d9:bb:72:92:ec:01:44:bf:4d:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EE:4D:21:85:CA:6D:C4:62:E1:9B:57:51:FC:6C:75:2D:DD:7B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/639636a5-892e-3e05-9973-ec7207475e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:99:80:5f:50:58:51:e7:d9:f8:f7:86:9b:0f:f1:67:52:
         1b:cf:f9:69:50:8a:4d:eb:f0:c4:54:d4:e1:e9:18:f7:76:f5:
         86:3a:19:e7:49:44:9c:a4:e3:71:83:dc:c4:1c:7b:8f:0c:fd:
         45:e0:9a:ae:4c:da:30:1b:fb:23:3c:fd:69:28:ab:75:32:57:
         0b:6b:58:b6:b6:13:1c:c5:52:bd:3b:99:c7:d5:29:df:18:6b:
         58:3c:48:99:b7:f0:84:78:06:4e:69:a5:38:8f:c2:ca:9b:f8:
         27:8e:96:e1:e6:4b:cd:82:e7:34:36:83:4c:12:35:7d:37:45:
         44:0d:7a:ff:4a:6a:77:3f:cd:14:3b:ee:f3:1f:ab:0e:31:d6:
         ba:71:38:bc:09:08:ca:a1:e0:49:72:c9:3e:00:fc:bb:6a:2a:
         de:69:cb:d2:c6:70:d3:d6:e6:b3:07:87:38:a0:1e:2c:80:81:
         81:43:68:dd:b3:15:73:52:96:c5:94:fe:e7:5f:12:93:32:26:
         80:33:5e:80:fe:77:be:ed:14:1f:62:de:9e:6a:f4:3e:87:e5:
         e2:d4:e9:9e:fc:5f:1a:57:35:71:99:cf:36:6a:f9:07:3b:ce:
         53:24:d4:a5:2e:e4:d2:46:ec:3b:1c:3f:b1:a6:9f:9a:50:75:
         16:04:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:44:18 2025 by rpki-client