Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9b65022-6439-345a-a820-c519d517df4f.roa
File:                     d9b65022-6439-345a-a820-c519d517df4f.roa (raw, json)
Hash identifier:          ZEqTg3/lHLAIIP/elpZS2IAAEQwZhKOgW9J2l7YyekU=
Subject key identifier:   35:05:12:1E:F4:A7:AD:DB:A3:7C:44:D6:92:7D:A0:A0:31:F5:06:18
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9678AA25F426303EA900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9b65022-6439-345a-a820-c519d517df4f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        142.187.0.0/16 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:96:78:aa:25:f4:26:30:3e:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=32d946ae-9fc1-4229-99b7-cadeb347e56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:ec:3d:5c:88:60:ef:d3:ca:4d:9b:56:7f:
                    05:47:60:b0:d7:49:1c:1a:97:bf:17:37:49:84:f8:
                    0a:de:ed:f7:c2:24:b5:5a:69:32:5f:47:e4:c4:fe:
                    ec:e9:8c:e4:2d:9d:7f:c2:1e:04:c5:ff:90:05:40:
                    1b:58:3c:94:7b:21:13:f7:58:c9:f2:d7:a1:58:8f:
                    a6:ac:e4:b2:56:39:64:28:28:b5:95:84:89:01:23:
                    c7:c7:62:06:e8:72:f1:5f:de:75:71:1c:5a:8b:e5:
                    f4:d8:89:b2:da:83:56:2b:48:81:41:93:ec:e0:a5:
                    a3:f2:e7:27:a4:37:2e:3d:41:68:90:b1:ae:3e:cb:
                    b2:d9:c5:e1:80:25:4e:73:59:ef:c5:4e:ee:10:45:
                    7b:46:ac:7c:88:27:ce:90:e6:7d:e8:c9:22:df:81:
                    13:e1:5c:67:9a:0d:d7:c5:f8:45:a3:dd:f7:e8:e4:
                    cc:82:37:72:5b:97:02:99:c8:93:a8:b8:be:59:18:
                    84:d3:2a:ee:6e:57:42:91:0a:ec:1f:6b:73:bd:73:
                    2c:61:c9:8b:62:01:90:f3:0f:79:dd:df:70:3c:87:
                    65:5d:e7:38:0a:be:99:0e:17:00:e0:76:87:44:2f:
                    9a:04:e7:57:7f:f5:40:83:91:8a:c1:1a:2f:8f:d0:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:12:1E:F4:A7:AD:DB:A3:7C:44:D6:92:7D:A0:A0:31:F5:06:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9b65022-6439-345a-a820-c519d517df4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:cf:18:82:69:cb:ea:aa:cf:df:48:f0:b5:40:4c:5b:de:
         1c:2e:77:cc:c6:28:97:55:57:62:a7:5b:ed:1a:db:b9:b2:e1:
         d4:f0:66:cf:b2:f7:e9:7e:ed:69:41:2f:8a:7b:51:ab:5a:46:
         69:0e:8d:c1:5a:32:2f:6d:89:b4:e9:17:c2:71:41:f3:e1:c2:
         dc:29:89:ab:04:49:4d:29:ed:9d:ac:6d:47:25:3a:3a:f0:47:
         47:b6:63:7d:7b:64:3a:10:40:fa:a1:78:4a:00:99:15:e5:07:
         03:42:db:b6:4e:85:05:d8:f0:82:7d:12:3b:b4:3f:2f:72:6f:
         f4:2b:79:e2:52:b8:a9:0b:b7:63:69:48:b9:05:34:a5:2e:87:
         39:32:d3:c8:05:ab:16:03:29:99:8f:28:54:b2:88:2f:8d:df:
         f5:f7:7f:13:97:a8:f3:d2:11:b3:d1:1e:fd:11:cb:0f:19:c9:
         d4:c2:8d:0e:c7:a5:71:38:dc:60:0e:fb:f4:cc:25:03:88:83:
         1d:96:6b:3c:03:13:ad:56:d3:f4:98:34:39:4d:5c:91:3d:a2:
         f8:ff:78:1e:e0:d9:24:e5:fd:6e:9f:8f:52:9b:84:a7:15:90:
         6e:f7:50:25:8a:27:fb:36:b6:25:36:d2:e6:28:39:b8:05:a0:
         38:cf:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:30:06 2025 by rpki-client