Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c859b9e-dc14-3571-83c5-880db2da2346.roa
File:                     1c859b9e-dc14-3571-83c5-880db2da2346.roa (raw, json)
Hash identifier:          C14SeYsXAxmSBbPldonfu2s2WGHuroIYswh2B+83VFM=
Subject key identifier:   3B:43:CB:67:51:A8:8E:A1:15:82:C2:BD:B1:89:37:CE:54:D7:8A:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A14658BDA486F29EBF8EEB080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c859b9e-dc14-3571-83c5-880db2da2346.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     0
IP address blocks:        199.7.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:8b:da:48:6f:29:eb:f8:ee:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=af0162d5-7ad1-4f51-b91b-a843e59794cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:3f:d1:a3:fd:5b:2c:55:df:8b:a1:d4:1c:
                    0c:8d:e5:d7:c7:4d:65:50:f7:8f:0e:69:06:20:fa:
                    e3:f2:19:3b:69:26:19:fe:07:79:8c:ab:dd:f0:6b:
                    2f:76:fa:0e:82:ef:d4:0a:14:d5:81:2e:a4:3c:d0:
                    f0:47:1b:1f:05:b9:cb:52:7d:31:dd:5f:cb:a2:1c:
                    f4:0b:c4:1f:58:27:dc:23:70:1f:3b:ed:74:7b:e6:
                    02:bf:f8:10:ab:35:2d:68:25:a7:e8:4d:e7:7a:d2:
                    6f:42:3f:42:9a:0b:22:7e:a8:a7:b1:1d:69:46:71:
                    2c:1b:07:07:4e:9f:5d:85:aa:bb:58:87:83:3f:1e:
                    54:d7:ab:03:49:5b:b2:fe:6f:b3:7e:3f:6f:4d:4c:
                    3e:58:86:7b:21:67:c9:ba:d8:02:ef:4c:13:d9:35:
                    17:0d:ce:d7:78:28:c1:d6:74:a1:ce:8a:0c:f7:31:
                    53:f0:6f:d7:a8:77:2b:cd:0d:11:45:53:86:db:c9:
                    65:fc:a8:97:61:36:e0:84:ea:b9:f5:bd:78:34:44:
                    1f:ab:20:30:60:88:5d:64:84:f5:f4:e7:fa:2a:14:
                    8b:c2:9f:da:c3:4f:11:1b:81:df:1d:9b:85:8b:d9:
                    63:f6:ba:90:d5:f7:a6:98:fa:33:3f:97:73:72:2b:
                    61:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:CB:67:51:A8:8E:A1:15:82:C2:BD:B1:89:37:CE:54:D7:8A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c859b9e-dc14-3571-83c5-880db2da2346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:24:e9:43:c1:63:a8:03:62:cf:d2:01:c7:4a:fa:ea:51:0c:
         81:61:68:4b:ed:51:77:8d:90:d1:b6:3a:3c:67:c1:8b:8b:45:
         6c:35:eb:d1:e8:58:ab:96:20:e4:bb:88:b7:3e:e3:b9:81:09:
         f2:3d:88:23:2f:74:c8:30:95:3f:4e:e9:11:23:0e:3c:a1:29:
         d3:c9:88:37:50:18:61:92:4d:d6:65:a1:b9:80:3a:50:0c:43:
         ed:ae:fa:4c:1e:c2:d0:e1:8d:be:64:14:de:c3:f4:61:73:89:
         ab:c7:1d:ca:61:54:3b:fb:2b:f0:38:fd:ac:dd:59:6b:d3:e9:
         aa:97:e8:59:8f:3d:58:0a:98:2c:64:72:5d:4d:d0:73:97:57:
         21:a3:94:51:5a:5b:1c:bd:f2:03:70:53:27:c1:69:1e:14:5a:
         c7:83:8e:2d:04:22:f4:e9:c6:ca:ba:60:16:fd:91:3d:3e:fe:
         7a:a8:f4:ba:e4:ee:18:ba:a0:1f:4d:48:c1:b5:1f:5f:84:4f:
         3b:d6:3d:fa:50:8a:be:ea:c7:5e:38:c4:d8:41:d2:fc:c5:07:
         25:6e:67:f9:15:97:19:4c:e7:be:df:1e:18:da:f1:85:3d:65:
         90:ad:64:e7:46:c5:0c:5b:3c:54:4e:ee:36:26:af:29:b1:85:
         48:c7:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:08:18 2025 by rpki-client