Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
File:                     a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa (raw, json)
Hash identifier:          zVR+GefBSs8V4rX7n/S4T6KPyLcV+SltidR9XUNH7ao=
Subject key identifier:   6E:EC:18:01:71:8C:35:6E:4B:BD:D1:A8:2C:CF:BB:8F:0B:22:9D:1A
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584A2D858FFDF78FF82443BB96C0
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     211535
IP address blocks:        128.254.224.0/24 maxlen: 24
                          128.254.226.0/24 maxlen: 24
                          128.254.227.0/24 maxlen: 24
                          2602:fbec::/36 maxlen: 36
                          2602:fbec:224::/48 maxlen: 48
                          2602:fbec:226::/48 maxlen: 48
                          2602:fbec:227::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8f:fd:f7:8f:f8:24:43:bb:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=a282776c-808d-46a8-bde1-36a3137bd833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:d1:7b:cb:25:62:c3:16:06:e7:ce:46:c3:
                    45:71:1c:01:7e:dc:bc:56:b4:7b:c0:cd:c8:09:b6:
                    01:11:e0:92:72:e4:4a:87:31:fa:04:35:59:c8:60:
                    2c:b2:32:77:27:dc:ff:7a:ab:5c:08:f1:89:60:02:
                    99:ea:c6:4d:5f:fb:e6:a0:40:f3:ee:d0:fb:70:6f:
                    bd:e4:11:b1:11:0f:6e:97:6d:88:ab:8f:60:48:2c:
                    a2:f6:23:dc:43:da:36:a3:10:42:37:8d:82:05:3f:
                    59:53:ac:65:a0:fa:0d:66:cb:a3:03:ec:63:24:49:
                    ea:fd:3a:4f:c6:a4:86:2a:cf:f0:36:08:20:f4:88:
                    7e:b0:91:a6:85:6f:9d:03:0e:28:04:25:8f:f3:ca:
                    f8:70:98:e1:ab:71:81:da:d8:36:fd:c4:03:c8:e7:
                    dd:ed:b6:d0:5f:94:74:f2:88:48:96:a8:4c:1a:63:
                    f9:d3:36:9d:e5:e7:75:03:01:54:be:11:22:71:1f:
                    07:9f:01:52:f5:d8:34:4e:2e:db:5e:82:1b:53:40:
                    d5:78:92:74:df:98:bf:f1:6a:3b:6d:ab:be:39:02:
                    80:db:03:b5:98:96:d2:32:15:c5:e1:35:7e:1c:27:
                    d3:43:1f:48:3a:ce:7a:e4:37:4a:c7:f1:76:0a:36:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EC:18:01:71:8C:35:6E:4B:BD:D1:A8:2C:CF:BB:8F:0B:22:9D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.224.0/24
                  128.254.226.0/23
                IPv6:
                  2602:fbec::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:38:4e:2e:ef:be:c5:48:51:44:f1:69:ae:50:83:ea:41:
         a0:27:b4:95:f5:ea:98:fc:a4:6d:97:53:cd:d6:db:98:33:09:
         56:f3:70:01:8a:fb:83:aa:4c:44:e1:38:31:2b:c8:75:2e:f6:
         46:b1:b6:fe:bb:43:75:5c:5c:36:77:be:9d:52:94:d4:7a:dd:
         62:cf:b3:01:46:f9:b1:b0:f1:3c:6a:67:12:f3:6e:a0:52:cc:
         03:90:71:8e:de:0c:93:62:c7:e2:ad:23:46:39:cd:1f:4b:d2:
         aa:9a:02:e0:7d:ca:4e:8b:c2:24:c4:80:c7:43:73:be:32:dd:
         64:15:3f:75:78:40:1b:2b:10:bb:a0:e2:f0:d6:a9:6e:7b:57:
         d8:0c:b8:62:a7:c1:5e:76:ed:2f:bc:ac:44:d0:84:59:87:fb:
         7d:9e:61:94:ff:3a:7d:8b:b6:8b:df:2a:31:98:22:61:c4:d9:
         cc:af:1f:f9:78:6d:81:4c:8b:a2:42:cc:65:1f:c6:1d:d8:11:
         ef:16:8b:3b:e0:19:3a:e6:df:53:03:76:72:89:54:a6:71:1e:
         8c:a1:79:95:59:b7:a4:d0:d0:bb:23:b2:71:ea:00:46:10:46:
         11:05:74:e0:69:8d:d0:cf:fd:a8:91:0e:ca:26:0e:fb:72:2b:
         06:57:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:18:08 2025 by rpki-client