Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa
File:                     c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa (raw, json)
Hash identifier:          dwTLou9hYGXKhWAuG9rw0l8uo7FJZHNRu10e5pRNo2I=
Subject key identifier:   2A:7D:3B:73:31:A4:6D:DE:CF:CB:0D:19:6F:D9:4C:FA:49:B2:52:A0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F71522A96C98AAD1378071C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     1225
IP address blocks:        198.64.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:22:a9:6c:98:aa:d1:37:80:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=1364b0b5-da51-4c0c-96ea-81cbfe217b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:4e:74:9a:d2:c0:0c:3a:50:11:18:af:84:
                    ce:ca:66:0b:c9:9e:17:2a:ab:64:d1:c1:cc:f1:7c:
                    f5:93:ae:a7:2d:dd:8f:2d:47:c6:49:79:36:20:c5:
                    a2:d7:10:d2:9a:90:7d:4c:15:2b:d2:5a:65:91:ec:
                    9a:63:40:24:f3:a0:c0:4f:c5:05:90:8e:80:1d:2c:
                    55:37:1c:c5:f3:9f:d1:e4:94:44:a4:f5:34:ca:10:
                    b6:5a:c0:55:83:1c:b1:93:fd:a3:cd:d7:78:d4:29:
                    99:75:54:31:f2:c2:ba:d6:8e:e2:28:5b:1c:2a:de:
                    a4:82:73:6b:96:85:a6:7c:18:80:1c:b4:8f:39:8c:
                    6e:fb:2c:33:f5:cc:d0:b5:77:81:31:04:45:98:3c:
                    ed:5d:e1:28:f4:9f:00:d7:5f:80:ec:a8:0f:e1:bf:
                    33:08:e7:f4:4e:fd:48:b5:a4:0e:58:f9:0b:45:9d:
                    59:8a:3b:38:2d:a0:ab:7c:98:b4:50:37:f0:91:2f:
                    bd:4a:cc:aa:28:83:b9:e6:fd:3b:f4:a5:63:91:0b:
                    3d:c1:84:49:36:a0:2a:88:4c:7b:e7:b3:de:fb:32:
                    ff:ee:a1:32:0e:df:64:c2:41:e0:02:bd:29:09:d2:
                    00:06:10:8d:00:cc:61:f4:72:86:67:21:4a:f9:14:
                    93:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7D:3B:73:31:A4:6D:DE:CF:CB:0D:19:6F:D9:4C:FA:49:B2:52:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.64.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:15:79:47:f8:be:d7:10:bd:75:f6:78:23:5c:c9:b4:53:ba:
         76:76:c3:86:c2:94:b2:ce:1f:b6:b6:ee:a6:3c:90:2f:84:58:
         e4:09:2b:f3:cd:df:ca:f1:2c:3c:b2:66:50:d8:cf:bc:26:ce:
         53:a4:44:1a:e9:b6:b3:b0:a4:4f:42:5a:c0:e8:87:71:c9:41:
         a0:52:85:a7:a2:3e:9f:13:a1:0c:62:cf:a6:7a:2b:fb:75:4a:
         be:ec:03:64:9f:58:d4:a1:58:17:03:8a:8a:9b:5f:3f:e7:b7:
         d5:8a:ca:d4:80:96:b3:61:4e:cf:d2:a1:30:ac:7f:bb:89:39:
         d4:4a:a7:3e:97:33:f3:74:e2:77:27:c0:b0:0c:6d:55:c5:ef:
         39:89:0c:ab:b2:9d:6b:e2:c8:25:f2:d7:10:e0:dd:4e:a2:03:
         cc:85:34:32:96:c3:78:4d:18:61:0d:3e:c8:d9:4e:0b:dc:90:
         a6:90:f7:c5:8e:ff:61:27:96:77:f4:ac:05:9f:fe:c9:9f:14:
         94:c9:cc:c4:3a:3a:3c:fd:84:3e:54:69:9a:a9:e8:ef:c8:09:
         6e:8a:14:d6:c4:61:6b:8b:34:25:76:b1:70:f6:0f:c0:15:7b:
         4d:13:c0:46:a3:9f:cf:c8:63:49:3a:15:0b:e1:3b:0e:b8:d6:
         25:ac:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:39 2025 by rpki-client