Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31ebf730-ac91-3ac2-8c01-3614e3622c45.roa
File:                     31ebf730-ac91-3ac2-8c01-3614e3622c45.roa (raw, json)
Hash identifier:          WFE6PuuazNPt2HIjsKLzYddEvzrgkNms226fk1/6rYs=
Subject key identifier:   34:28:14:F3:F3:10:D8:DF:F3:BD:99:7B:4A:91:89:28:89:8C:2C:2D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A3A1588D2232AEB958DA07500
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31ebf730-ac91-3ac2-8c01-3614e3622c45.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     30103
IP address blocks:        149.137.60.0/22 maxlen: 24
                          173.231.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:88:d2:23:2a:eb:95:8d:a0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b5d61cc0-179f-4bda-a9a1-e9330278dbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:a3:95:eb:9e:ff:89:12:8b:b3:75:93:10:
                    c9:d2:87:68:b1:e9:9a:85:6a:bf:4b:5b:e8:28:66:
                    19:01:59:ac:d7:57:da:66:6c:40:92:3b:bc:3b:5c:
                    5f:23:68:7b:33:18:c5:39:1a:0b:11:6e:e7:f6:40:
                    d7:0a:52:53:74:55:e9:26:94:e5:5d:bc:3d:03:fd:
                    63:00:21:c8:77:2c:41:3d:67:ba:36:f6:d3:da:d4:
                    43:72:da:39:8a:8e:dc:1a:b6:4c:a7:13:c6:07:e5:
                    57:cf:a8:e0:ce:ef:81:c4:7c:ca:2c:45:2b:4c:9d:
                    16:aa:1b:5f:33:34:44:10:d7:73:a1:9d:67:79:9d:
                    45:73:c7:cc:d8:09:1a:dd:72:b6:96:fc:52:bb:62:
                    d9:d0:6d:ab:04:bf:a4:48:2a:12:48:7f:a4:a9:c7:
                    44:67:c1:1f:cc:eb:9c:dc:50:a6:fd:72:7f:eb:44:
                    da:e8:b0:93:85:e5:3a:ad:c4:36:78:72:1f:f5:b7:
                    f7:c1:28:2a:89:9a:80:a7:3d:96:35:20:cc:21:60:
                    e6:46:ca:af:a6:70:f5:68:6e:37:d5:4c:f3:55:bf:
                    d2:b5:77:bc:3f:45:99:92:5c:10:3e:e5:ec:eb:e3:
                    a6:2e:de:3c:e7:a0:3d:d0:7d:a2:d6:22:35:4e:80:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:14:F3:F3:10:D8:DF:F3:BD:99:7B:4A:91:89:28:89:8C:2C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31ebf730-ac91-3ac2-8c01-3614e3622c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.60.0/22
                  173.231.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:c4:d3:a7:95:77:72:9a:87:70:02:71:d2:b5:38:1f:95:
         ec:3e:e2:07:de:42:00:d9:f2:a3:40:11:93:3a:f7:4c:7f:25:
         1e:f8:ec:b9:1d:94:1d:21:d9:a8:2b:8e:8e:70:2f:ee:cd:57:
         45:17:61:d4:08:6f:89:ce:57:fa:c8:01:d7:0d:d0:d8:a5:80:
         cb:a9:a3:33:41:22:ee:01:69:63:90:4a:a8:2b:a2:9a:49:df:
         00:63:2b:20:5f:c3:d4:bd:50:e3:fb:0e:cc:0b:46:5d:60:a1:
         9a:b3:2a:aa:2a:09:2c:34:7f:8a:fb:20:72:d8:98:26:8c:50:
         5c:57:c3:b7:9c:02:8f:8d:ae:cb:3a:1f:d8:53:d0:77:48:14:
         91:dc:ba:6a:cf:fe:d9:1c:81:f7:4b:d0:05:ea:c1:79:a5:51:
         0d:ef:9b:7b:fd:ad:ae:0b:c6:86:6f:4a:68:c3:48:63:eb:97:
         ae:49:cd:51:bb:79:40:df:0b:06:25:57:8a:53:b8:b1:a0:a8:
         21:00:47:60:7c:0b:e2:d6:39:12:c2:33:15:1b:ec:91:da:3d:
         96:ef:ad:22:9b:92:26:29:90:15:00:05:61:8f:bb:75:5a:d1:
         bd:62:ef:a8:69:56:02:76:93:aa:01:e9:e0:d2:4e:25:d6:e6:
         88:6f:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:19:51 2025 by rpki-client