Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec981230-0177-36c8-ac0d-3f426d39f7a3.roa
File:                     ec981230-0177-36c8-ac0d-3f426d39f7a3.roa (raw, json)
Hash identifier:          e6TwCSBYi47PCPIB3juChOfM0PyJ9HpwTNavgBqwqsE=
Subject key identifier:   09:32:78:FA:DC:3B:52:26:E1:F9:C7:BF:4E:0C:26:34:76:20:E1:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4312CB7622784B63149A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec981230-0177-36c8-ac0d-3f426d39f7a3.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        174.174.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:2c:b7:62:27:84:b6:31:49:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=a40b085f-741a-4509-a059-e12fabe2c8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:a4:41:57:fd:a7:29:78:b2:5c:2c:6f:9f:
                    66:1f:c0:df:8c:f8:bb:f4:cb:5f:0f:56:ba:27:05:
                    30:aa:02:c7:3c:06:19:50:24:5a:61:14:30:9b:d3:
                    e8:48:de:a4:08:04:3b:8b:44:f4:64:19:ed:f5:ea:
                    48:78:0f:36:6e:24:2f:a3:f7:f5:e5:be:a8:fa:ec:
                    68:d8:6c:ff:18:d0:62:64:78:cf:72:73:a4:c0:9d:
                    b6:cf:f8:e0:17:8c:ea:65:8f:8a:36:24:e1:a6:d6:
                    ad:14:c3:ba:48:dc:5d:8a:e6:67:18:41:94:25:35:
                    bf:e3:b6:78:ca:e7:13:88:fc:a6:da:b8:70:c0:65:
                    b6:ea:e5:8d:d8:08:aa:17:f1:92:36:9a:3a:c5:b0:
                    f5:b4:ab:68:0f:b5:6c:8e:ea:da:d4:75:97:f3:0d:
                    ae:a7:1c:e1:03:d7:dc:5f:fe:fe:ca:8a:5b:ea:bc:
                    96:92:c3:2e:3f:86:6e:fd:47:04:63:59:e5:13:5a:
                    cc:57:22:b3:25:1e:87:8a:40:ea:7a:48:f4:31:08:
                    56:5b:d6:20:8d:d8:d0:0d:7b:02:bc:95:fa:c6:d9:
                    8f:0d:33:83:86:63:de:4a:6d:ac:d6:9a:b9:19:43:
                    e7:fb:61:03:f5:8a:4f:37:5c:f6:82:60:40:29:a4:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:32:78:FA:DC:3B:52:26:E1:F9:C7:BF:4E:0C:26:34:76:20:E1:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec981230-0177-36c8-ac0d-3f426d39f7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:36:3d:28:8f:25:3c:df:7d:57:5e:11:fa:2c:f1:ae:03:
         72:49:19:b1:68:70:16:01:0a:e4:cd:ff:bd:e1:3b:a5:d8:26:
         b0:79:b3:c5:f1:17:3f:d6:9f:4c:47:75:3c:66:e0:7e:0c:e6:
         fb:0d:59:bb:c7:a8:10:36:a4:fb:88:0a:af:2b:17:23:b0:60:
         14:fb:e7:85:14:24:d2:d3:23:16:b6:d3:6d:1e:c6:70:cc:a6:
         83:9f:5f:d6:3f:0d:84:6e:a8:7c:4b:96:b7:4f:b9:4e:c2:85:
         fa:d8:e8:ee:5f:13:ed:05:83:db:8c:76:39:4f:51:a0:ac:23:
         09:54:03:c6:f5:2c:28:09:63:73:7f:1d:60:73:f0:14:de:4d:
         20:de:4d:50:af:b5:52:27:d7:7c:af:ef:ec:e5:c0:2a:28:3f:
         70:2d:4d:8b:06:fd:43:c5:2a:3d:52:7e:90:b9:83:f8:d6:c8:
         52:45:9f:aa:dc:be:25:aa:cc:af:c5:a4:14:20:a3:f5:1d:ea:
         6a:d8:27:e3:9a:53:53:97:7d:c5:fb:89:b6:43:53:a7:e9:5b:
         e2:71:ef:a1:5c:3c:12:48:77:51:7e:1c:e6:14:9f:dd:f5:59:
         dd:ee:cb:5b:4a:3a:ed:d7:7a:5c:0d:6c:53:bb:8f:db:29:66:
         36:72:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:12:24 2025 by rpki-client