Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/502e0cd8-721e-3ddb-830c-c276a058820b.roa
File:                     502e0cd8-721e-3ddb-830c-c276a058820b.roa (raw, json)
Hash identifier:          xAeTD+nXPKlc7cQyB2znBxdVbhewQ0r4zc1DUQORO3Y=
Subject key identifier:   5E:E2:4B:C3:AC:E1:04:7B:BD:DC:5A:03:74:C3:CC:02:7B:63:B3:2B
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A411050D6140F14C92A858B00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/502e0cd8-721e-3ddb-830c-c276a058820b.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     31898
IP address blocks:        170.114.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:50:d6:14:0f:14:c9:2a:85:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=9ca78015-9db7-4ce8-acd2-cafacbadb127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:12:96:b7:8d:00:4e:15:d3:e9:ce:94:c3:
                    b4:6e:58:ac:48:d9:c6:0a:5f:5b:64:79:78:06:c8:
                    6c:64:cf:d6:45:a7:b3:52:f5:ed:4c:88:10:b1:42:
                    13:cd:91:88:34:a8:cd:01:c8:bb:bb:9b:c2:ea:a7:
                    2e:f2:2e:55:ba:5f:76:54:e5:e8:02:f5:6c:b1:5f:
                    13:a7:ab:76:a7:29:6b:70:c6:49:41:7c:d0:fb:60:
                    ce:9a:ae:72:56:44:d2:b2:e5:ff:8e:4f:a1:df:5c:
                    af:0d:7f:1d:2d:a4:c8:18:08:b7:d9:fd:04:79:08:
                    4e:1f:ed:5b:b6:56:f6:3c:66:1e:a8:00:95:67:a8:
                    b7:e4:6c:18:97:6a:95:b3:be:11:30:ed:2a:82:02:
                    bf:58:7c:fc:09:1a:d8:07:6e:3d:7c:fb:aa:68:9a:
                    9d:8c:5f:b6:e5:79:0a:b0:94:69:d0:8d:3c:bd:65:
                    24:95:c9:ce:bc:df:00:90:19:22:66:03:78:84:0b:
                    40:22:71:2d:18:28:a6:cf:5b:3b:95:11:c7:06:c9:
                    55:c9:2a:fb:9f:b6:55:57:53:b8:bf:4c:3d:31:61:
                    ba:b4:8b:cc:f9:86:77:af:19:73:e0:9c:af:b9:01:
                    42:ef:d9:01:d4:f4:20:97:3f:68:b7:ba:1c:bc:82:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:4B:C3:AC:E1:04:7B:BD:DC:5A:03:74:C3:CC:02:7B:63:B3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/502e0cd8-721e-3ddb-830c-c276a058820b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:75:e1:88:ff:5c:85:c7:17:0a:cd:e5:14:bc:e4:6b:47:55:
         05:a7:c0:f5:45:60:f9:ac:6d:b3:d8:cf:21:ce:47:f6:e6:42:
         d7:8a:b1:09:64:12:81:1a:60:bb:0b:ae:73:f4:14:38:87:16:
         b6:10:a0:f3:26:f2:22:36:ac:11:1b:8d:65:67:83:64:c7:ee:
         f1:85:17:0d:b6:18:52:9c:c4:bb:7a:fc:fe:64:91:10:be:70:
         61:4e:9a:a9:4d:ff:57:8b:f4:46:8a:5e:9b:57:61:05:d3:20:
         1b:12:f9:36:9c:1b:6f:a2:90:a5:6c:02:e0:37:75:53:72:41:
         9b:f4:d0:18:7a:da:47:1e:d5:83:b1:0e:c5:c8:39:b6:21:50:
         b3:72:b4:f0:ed:43:0f:64:6b:ea:c0:b8:a6:f8:00:cb:4a:ca:
         78:31:b5:bf:d3:21:aa:88:c3:59:97:6a:ef:60:74:9e:88:5b:
         c0:e9:6e:40:78:1b:28:28:12:c4:3f:ec:99:9f:4f:bc:af:54:
         5b:80:ab:8e:d3:c8:e4:fd:ea:88:94:37:b4:8a:89:ad:4e:84:
         9d:19:5e:2b:f2:33:06:34:29:a6:60:e0:5c:bb:70:62:35:c1:
         3b:96:2f:28:e5:e3:7e:f0:3f:47:d8:5f:94:e5:b2:32:74:f5:
         83:6c:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:18:14 2025 by rpki-client