Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa
File:                     2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa (raw, json)
Hash identifier:          cLEIJ4ZxPDsjNBbje5q7UsayqVdSxwLVbWk1XsMqaLo=
Subject key identifier:   24:A4:A3:F2:86:31:14:EF:52:D3:B4:01:35:91:57:8C:C9:05:D5:C0
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584A1F901BDD594AC956CCEFF680
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     18434
IP address blocks:        156.55.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1b:dd:59:4a:c9:56:cc:ef:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=bd1d88e7-90ea-41aa-98ab-20372ac1280d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:f4:47:e1:b1:8e:81:3c:5d:e3:17:3c:f3:
                    7d:0c:e9:b3:b4:10:64:de:c4:0b:ac:a3:40:dc:f9:
                    97:7e:f8:a2:17:cc:76:bd:3d:59:91:fa:ec:91:36:
                    8d:65:14:75:2d:70:04:b0:d8:8d:5b:92:44:a9:95:
                    e6:90:8c:05:a7:63:fc:2b:38:da:85:d6:e6:15:97:
                    da:58:5a:41:77:8e:83:bc:ad:81:a5:fd:a8:73:e7:
                    57:39:e9:80:7c:16:58:55:cc:4e:24:38:1c:af:04:
                    5c:89:79:cc:c1:8a:ac:bc:10:7d:96:40:1b:f1:31:
                    45:13:46:e9:26:5b:9c:8d:ef:8c:8f:f1:11:aa:87:
                    68:15:3f:d7:af:19:af:f3:51:09:81:52:2c:bc:a1:
                    f2:eb:87:36:97:f9:68:80:14:a4:51:c6:3a:0f:4d:
                    13:39:4e:5d:8f:b2:99:77:05:c0:7b:d2:e1:0a:5b:
                    88:8a:ab:fc:91:5d:72:bc:03:44:40:73:ce:43:fa:
                    36:b2:0e:50:de:99:bb:96:81:7d:35:4a:b7:7a:ba:
                    87:e4:87:cd:d7:1c:3d:96:24:61:ff:eb:9b:fa:68:
                    0c:e1:2a:5c:aa:29:cd:cf:41:51:4f:59:41:4f:30:
                    9e:ac:7c:cb:e5:c2:24:c7:5e:3e:46:6e:5e:e5:5e:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:A3:F2:86:31:14:EF:52:D3:B4:01:35:91:57:8C:C9:05:D5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/2c6c7a8d-a6c5-3422-8df8-f8667f163df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:68:e2:12:21:17:f4:67:ee:bb:93:80:52:b5:73:bc:4e:
         34:0f:74:50:fd:54:2d:3e:73:3f:f7:f5:73:24:3a:4a:42:91:
         8e:f2:b4:1c:1b:f6:cf:ab:6c:4f:95:22:7c:bb:cd:58:49:c4:
         66:78:3f:23:30:80:aa:52:59:b9:de:ad:67:93:c1:75:6c:be:
         42:86:96:03:22:2e:ba:6e:40:31:42:56:57:3c:41:c8:d2:26:
         4a:8c:38:45:92:8a:21:ad:33:87:0b:cd:6c:81:0c:b1:d3:a5:
         23:8f:97:60:58:a1:36:c0:98:0a:07:a0:90:11:48:b0:2c:19:
         3d:0f:21:6e:64:27:37:a8:21:33:61:9d:5b:45:64:8d:2e:c9:
         d1:7a:8b:21:6b:47:2b:4e:8d:f5:a4:55:41:3f:b4:23:fa:0d:
         7c:de:4e:62:be:3f:4a:72:31:c4:3b:fc:76:93:b9:f3:55:93:
         da:57:e4:3d:40:8b:6f:d3:33:5b:4c:08:4c:27:1d:b3:0c:e5:
         f8:cb:cd:37:e8:09:6f:ec:26:bf:2f:16:03:67:85:f3:6d:7c:
         4e:9f:3a:bc:8d:32:5b:33:09:e3:5b:22:ba:0f:84:6d:3a:61:
         5e:32:dc:ae:66:bd:cf:c4:b3:04:37:d1:18:d0:0e:32:40:ec:
         ea:26:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:16:56 2025 by rpki-client