Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa
File:                     5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa (raw, json)
Hash identifier:          fsHiWLVD9v/aqX3ZI9mbZT/4g6T6ZF0EADKqf7XvePU=
Subject key identifier:   78:D5:29:9A:36:07:AF:26:D2:34:D3:3C:47:AF:8F:C8:6C:AC:A0:88
Certificate issuer:       /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
Certificate serial:       010D0C9F43285849DC8FC31DCA64395348258180
Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     20394
IP address blocks:        216.177.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c3:1d:ca:64:39:53:48:25:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=426195df-6e7a-4c26-a812-8c267ce2ff6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:d1:98:6b:e5:1b:ff:1c:73:e2:d4:70:22:
                    b4:7b:4b:2a:75:43:e1:9f:9d:ec:54:0c:50:52:b2:
                    88:db:7a:38:6d:a6:c7:55:db:5c:e7:c6:ab:b1:40:
                    b2:e1:1c:66:d0:53:51:dc:f0:42:b7:4d:7e:91:30:
                    37:2b:46:35:c0:65:dc:16:c4:05:42:f0:17:97:f9:
                    a2:13:64:59:1b:e4:19:b9:17:75:58:01:17:2b:56:
                    80:26:79:20:99:db:f9:be:c1:3f:c6:4f:9c:4d:60:
                    29:6a:ad:28:63:5a:30:c6:d1:35:db:10:dc:f3:e4:
                    d6:3d:9e:27:8a:f7:44:62:c4:16:71:fa:da:1a:50:
                    7b:ba:fe:f5:f6:db:40:55:b0:bc:50:4a:64:72:d0:
                    ae:73:c4:1e:33:bf:b5:79:52:46:64:40:1e:ca:81:
                    a0:a9:bf:fc:08:ea:7b:ac:5d:82:f3:03:bc:f2:c7:
                    7b:bc:8a:e1:97:49:55:8a:39:f4:ea:91:cc:e6:69:
                    7c:1a:de:2a:55:48:69:f7:8f:0f:a1:bc:1d:9f:09:
                    a5:15:13:64:2f:53:bd:a0:7a:4c:df:c3:35:e5:a5:
                    4e:45:41:ce:1a:42:90:1d:84:88:93:bb:a8:b9:17:
                    30:15:e3:9d:30:2b:eb:aa:94:2d:c4:fe:b9:21:87:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D5:29:9A:36:07:AF:26:D2:34:D3:3C:47:AF:8F:C8:6C:AC:A0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:42:63:77:6c:68:ab:c1:56:41:9a:6e:70:31:cd:dd:cb:
         ed:c6:d0:f0:3b:d0:8b:4a:59:d2:f0:fe:c1:fa:87:a7:d9:91:
         4b:a6:00:23:b4:31:df:c2:1f:4c:5a:e4:f5:00:73:17:e3:ae:
         e2:57:31:55:6f:e2:60:40:21:82:ef:35:5f:86:5f:87:cd:50:
         8b:34:58:7d:5a:ec:20:f5:21:fa:63:30:1c:f5:a8:c2:67:de:
         0a:53:98:82:f5:4a:36:80:16:79:d2:a6:78:b0:04:39:ed:0f:
         ed:ff:9f:ad:cf:53:52:c8:d0:81:24:f9:6f:ad:e6:83:58:d8:
         09:c9:bd:40:5f:0a:b7:ca:26:e0:41:fd:4f:a7:69:16:b4:37:
         c5:73:ff:0d:29:1c:77:7f:7d:c6:e0:b1:e1:c9:0f:07:75:c9:
         8e:77:a2:b4:71:68:fe:ca:83:68:e3:de:2e:5d:62:1d:d6:73:
         63:5a:ab:e4:c5:29:58:21:9b:33:61:08:a7:a2:56:50:de:65:
         b6:20:d2:69:c6:63:80:91:6d:97:0f:df:62:d0:4d:cf:c4:62:
         27:06:8c:30:b5:ba:c8:d3:d4:d0:40:5b:25:76:56:10:85:1e:
         90:18:c0:5b:aa:c3:2f:82:c0:c7:51:7d:24:29:10:63:27:c6:
         65:44:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:45:06 2025 by rpki-client