Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa
File:                     3cd92a3c-2257-3455-bef4-1fda1598d15a.roa (raw, json)
Hash identifier:          /d/WvJvSjRIItNmNp/qsGg6RN1/j1pUEMWd1/PFwyaE=
Subject key identifier:   A5:7E:CA:6B:70:00:7A:AD:D3:DE:E8:18:E1:8D:93:9F:61:E9:D3:8A
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584A252BA5AF6A19DCCE64319600
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa
Signing time:             Tue 10 Jun 2025 13:13:37 +0000
ROA not before:           Tue 10 Jun 2025 13:13:37 +0000
ROA not after:            Mon 08 Sep 2025 13:13:37 +0000
asID:                     397976
IP address blocks:        143.223.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:2b:a5:af:6a:19:dc:ce:64:31:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Jun 10 13:13:37 2025 GMT
            Not After : Sep  8 13:13:37 2025 GMT
        Subject: CN=848e6ca7-119e-498d-b76c-167db9fbb908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:f7:ed:e8:e2:ef:16:95:7f:ed:36:70:02:
                    b6:a5:49:1c:29:0e:d2:46:62:2a:77:6d:37:0a:01:
                    cd:98:f5:91:12:43:8a:e0:4a:58:3d:37:52:77:84:
                    a9:fe:c4:f0:74:60:ff:d7:07:0f:b0:64:09:c2:06:
                    11:5f:8d:5d:fc:65:38:0a:ee:41:92:1f:4d:b4:85:
                    2b:dc:eb:02:db:39:e2:56:05:b8:45:02:24:1a:60:
                    e8:fe:72:fc:a1:95:10:78:8e:ea:6a:6f:f1:31:b3:
                    48:ea:9e:86:c1:2c:ab:c2:8d:b7:0e:a6:42:6e:29:
                    2b:33:6c:92:c9:bf:64:42:50:16:87:b4:87:0e:81:
                    19:2f:e9:6e:b6:db:34:97:fe:12:cc:89:cf:43:b4:
                    c1:a8:33:f3:15:84:8f:b0:ad:2b:53:f1:0c:09:0e:
                    86:f7:24:95:9e:0b:c3:3d:40:f6:5e:57:da:04:23:
                    0f:61:91:8e:ae:97:c6:86:21:65:74:fb:e1:d9:f2:
                    34:b3:7b:f8:9e:87:cd:e7:86:4d:17:cb:98:29:a6:
                    9a:9d:34:6c:f1:1c:a3:05:b4:47:15:43:01:59:17:
                    08:fb:0c:37:c5:2e:df:a2:ea:a8:f1:6d:88:78:ac:
                    21:4f:76:38:ca:18:e1:7b:21:04:8d:52:2b:c0:0f:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:CA:6B:70:00:7A:AD:D3:DE:E8:18:E1:8D:93:9F:61:E9:D3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3c:e9:ce:8d:02:e6:17:08:0e:ed:5b:c3:44:6e:c1:cf:d2:
         27:ab:51:22:2f:a9:c9:1b:f4:bf:d1:a9:fe:86:dc:c7:59:85:
         6f:b8:56:18:dc:e6:4e:f8:de:43:67:ff:a6:da:85:3a:43:f7:
         1f:5d:fe:2c:bf:86:a9:7d:b7:ad:95:6f:dd:de:42:29:3b:6b:
         8c:1e:3e:a2:c0:2f:7a:97:32:e1:88:75:67:cb:e3:f7:ce:b2:
         89:58:1d:9f:91:9f:0d:d1:9f:63:16:5a:ef:83:d5:24:8f:4a:
         38:7d:dc:a8:40:b3:4c:3b:d7:43:cd:84:2e:c1:ac:bb:2a:65:
         3e:6b:8d:07:76:95:d2:16:9b:9c:f2:61:6e:fc:db:2c:e3:9d:
         6a:bd:f2:00:07:38:b2:a5:0d:ad:8b:20:35:87:46:a0:e7:92:
         00:cc:37:61:21:e9:ac:99:cd:3e:17:4a:a8:e4:0b:f5:df:4f:
         00:69:b8:44:f4:eb:c4:87:d9:9e:b1:3b:c8:ec:6c:b4:fc:fe:
         9b:6c:33:5c:80:91:12:60:44:29:8c:99:b3:d5:28:29:c7:b4:
         91:b4:44:9d:15:17:b6:ac:52:53:22:81:c3:78:02:48:0e:33:
         c4:41:11:c7:43:e6:b8:ae:a4:d6:9e:56:1c:fe:95:1a:be:ac:
         2b:5c:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:45:18 2025 by rpki-client