Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e3563b4-96ca-349d-beb4-f511356d7ba6.roa
File:                     3e3563b4-96ca-349d-beb4-f511356d7ba6.roa (raw, json)
Hash identifier:          1MmZ9AMhfvamvd+kFJbQmqZxHOGnEjB9vNDXx/Wq5yA=
Subject key identifier:   60:DB:E0:15:8D:B5:B9:5B:72:1B:90:D4:AE:21:DD:C1:25:FF:68:0A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8B41246774D95285DA40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e3563b4-96ca-349d-beb4-f511356d7ba6.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        64.229.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8b:41:24:67:74:d9:52:85:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=2e25a182-be11-4186-95ea-59079dde7b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:9b:00:03:55:7f:c0:83:1d:1a:30:78:fb:
                    a7:93:48:91:65:20:d2:25:de:1e:cb:86:e7:7a:2a:
                    09:06:dd:da:57:ea:c2:4e:a0:48:de:50:60:3d:c3:
                    23:6e:59:73:29:34:1c:7b:05:70:96:44:ff:78:8e:
                    79:9b:86:35:11:5a:ca:69:82:15:cc:e1:74:e7:24:
                    3b:48:e2:6d:5c:1c:64:ec:db:64:e8:3d:4b:f9:ce:
                    17:05:8f:2b:a5:68:95:ca:2c:be:a4:bd:1f:d3:99:
                    c1:55:74:34:e4:49:ae:85:13:5c:5c:2f:8b:0d:69:
                    6f:5b:be:c4:7f:a1:f7:db:c6:a2:3c:0c:ce:7e:e6:
                    f2:76:1e:e2:df:8f:4b:50:c2:56:fb:8f:48:30:98:
                    9d:bf:2a:d0:03:7c:92:16:8f:f4:0a:55:e7:f6:df:
                    9d:8a:61:66:c6:97:bf:43:78:c6:1e:fa:14:dc:1f:
                    3f:14:51:b4:7f:5c:5e:ba:ec:dc:e8:77:7f:33:eb:
                    1a:e9:7f:63:33:8b:40:db:e7:07:48:0e:a2:da:4a:
                    f4:4c:41:55:4e:9a:5c:c4:63:ec:bf:ec:92:25:ad:
                    52:35:89:53:98:25:45:ba:3e:e0:84:36:64:32:90:
                    b4:68:77:3a:9c:07:e7:ff:81:0b:1c:21:23:24:ad:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:E0:15:8D:B5:B9:5B:72:1B:90:D4:AE:21:DD:C1:25:FF:68:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e3563b4-96ca-349d-beb4-f511356d7ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:42:48:8f:97:df:da:3f:f8:4f:4b:87:34:e8:72:98:fa:
         6a:3d:f3:15:e3:c8:f1:10:05:a2:28:66:9b:1b:06:f2:d7:eb:
         12:35:07:df:94:3c:07:47:cb:aa:05:68:7d:b7:45:74:3b:92:
         ac:b5:c2:b3:f7:ff:08:d0:10:2e:33:f0:31:9e:bb:ec:28:d8:
         2d:40:b0:bc:3b:ec:ed:e1:76:cf:75:e4:04:7c:a2:e1:a6:f7:
         a0:1c:71:15:4d:18:58:c3:fa:f5:e8:25:8a:57:70:ba:62:5b:
         93:8e:f7:4a:a0:ab:da:6e:f0:a7:9c:01:2a:42:0c:02:30:0f:
         7b:d8:c7:9c:19:ee:f9:38:68:59:f6:3e:c4:bd:99:dc:07:78:
         5a:bc:e7:f8:a5:8a:ea:20:7a:3b:3e:6f:69:1e:15:75:8a:e8:
         3c:6e:21:dc:19:23:cd:c0:76:4b:84:dd:86:68:07:fb:49:01:
         e9:c2:ea:76:e3:10:78:bb:a8:aa:53:29:e9:48:17:e3:4e:2a:
         5d:18:f8:d8:47:d7:b3:22:50:cf:75:ec:f4:07:e2:ca:40:a8:
         61:be:79:9a:dd:73:9f:45:ee:a0:4d:12:97:f1:80:cc:c4:7c:
         44:8f:91:02:4f:08:f3:6f:b5:cb:b6:e0:1d:5c:f0:87:fa:b8:
         a9:c4:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:08:36 2025 by rpki-client