Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e49a42-de29-3495-8f91-22cdc57c4839.roa
File:                     18e49a42-de29-3495-8f91-22cdc57c4839.roa (raw, json)
Hash identifier:          MMJdz7Bm29HhjYQSpL6NTV6a06VdlwYjz/VljwDvEas=
Subject key identifier:   82:F0:0B:59:EB:40:B8:E7:9A:53:23:B1:3D:25:8A:95:8C:77:56:8E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAFA6C8789B9C2F3FEE40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e49a42-de29-3495-8f91-22cdc57c4839.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     40575
IP address blocks:        209.128.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:af:a6:c8:78:9b:9c:2f:3f:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=be907878-0f71-468f-94eb-d3ffa0cf18ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:f0:d9:74:88:b7:49:d3:47:fe:16:3b:81:
                    40:e8:f2:b8:6f:83:44:39:20:fa:c5:0b:c3:1f:af:
                    fb:3f:d3:d2:d6:25:cb:d1:bb:a6:79:f8:86:de:8d:
                    3d:76:e6:80:f2:c5:4e:78:26:90:02:44:a4:fe:d3:
                    5d:72:f6:20:cc:36:e1:e8:15:a6:8a:67:7a:fa:c3:
                    12:ef:3d:29:2f:85:3b:53:63:f4:64:73:e0:5f:b4:
                    63:bf:26:f8:bc:78:0f:9b:ed:5d:1c:6a:56:6b:c5:
                    ed:55:cc:7b:79:2d:84:9e:c9:53:69:53:3a:97:db:
                    6f:c0:11:df:25:d1:a5:7c:32:98:08:8a:00:5b:21:
                    78:60:d3:9e:95:b7:28:ad:50:b7:d2:4c:fb:e4:57:
                    9c:d6:ad:c7:6c:77:60:4e:ee:e7:03:0a:12:16:49:
                    d1:81:a2:90:b2:82:ab:1c:5c:30:a8:8c:17:6f:d5:
                    d6:2f:92:66:bb:37:35:a0:a3:36:8e:13:98:ef:a9:
                    d9:e0:66:36:d6:2b:96:90:0c:ec:6e:a5:2a:93:75:
                    03:67:b5:68:1f:11:48:92:db:c7:f0:5f:81:9a:32:
                    fc:07:b7:11:8c:72:6c:c2:ee:1b:47:6a:de:b3:c5:
                    00:91:fc:e3:69:e6:6f:04:33:7d:b1:98:bd:40:91:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F0:0B:59:EB:40:B8:E7:9A:53:23:B1:3D:25:8A:95:8C:77:56:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e49a42-de29-3495-8f91-22cdc57c4839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:28:ff:49:38:79:05:83:4f:61:24:ab:5f:39:19:dc:0f:93:
         e4:36:3d:f8:87:f7:a7:da:86:7d:90:1b:48:96:ea:b2:02:9a:
         89:a5:e4:41:66:bc:82:35:14:c4:27:2d:c5:39:e4:a3:94:8e:
         03:5d:26:71:fd:1f:1e:7d:33:ba:97:03:4a:40:45:bc:d7:de:
         de:ae:b0:ea:c6:72:c2:fa:2b:c0:98:9e:32:8b:81:10:da:72:
         c0:37:79:c2:c3:ad:02:59:cc:43:ee:54:6c:28:65:ce:7e:b4:
         1c:89:b4:62:b2:8a:34:17:a2:e3:7d:4a:6b:07:4d:ef:8b:0b:
         35:b2:18:90:da:2a:b8:a9:6c:99:f3:d9:85:09:b1:f2:0c:68:
         de:10:52:2a:f5:b4:9d:7c:a3:61:7b:3f:e3:34:b8:29:ff:d1:
         1f:31:7e:be:64:79:33:e5:f0:40:2e:15:27:5d:f0:57:11:f8:
         7e:aa:d1:6d:97:eb:48:23:bc:8f:5d:a9:a2:6b:49:6d:10:8b:
         16:a5:07:96:7b:92:90:67:2c:fc:d3:67:c0:53:b5:1a:ce:fd:
         7e:4c:9a:e6:73:55:cb:41:b8:be:45:50:05:fc:c9:49:ab:33:
         e3:23:3f:80:dd:ba:32:f6:24:08:20:15:51:5e:67:78:5e:97:
         65:c4:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:59:43 2025 by rpki-client