Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b76b0e73-3654-3759-b899-2df0895f0aed.roa
File:                     b76b0e73-3654-3759-b899-2df0895f0aed.roa (raw, json)
Hash identifier:          pX2N8ls96q8756ghAGIDTtOK/FNExKqbsFG9potUAwk=
Subject key identifier:   60:30:8E:86:11:F9:58:FE:D2:5F:73:14:AB:73:76:1F:D8:FD:5C:D4
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584A1F90245F7F6D190066160600
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b76b0e73-3654-3759-b899-2df0895f0aed.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        170.225.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:24:5f:7f:6d:19:00:66:16:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=6a4ab95a-5e1a-4b93-8a42-787975185815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:5f:e0:89:db:34:de:6c:d7:01:11:9a:17:
                    d4:d0:86:12:2b:ac:71:20:b4:c2:a6:33:4e:28:60:
                    34:dd:07:2a:5a:04:c4:a0:33:4a:67:21:2b:4b:f9:
                    69:ff:53:bb:fd:18:8d:04:a0:19:be:3f:ff:b3:68:
                    8d:05:70:49:8a:f9:8e:af:34:7a:7e:d1:f9:98:d7:
                    c1:e2:b1:91:78:75:c9:7d:0f:bb:d6:ad:b5:19:c3:
                    80:d8:eb:07:86:9f:a4:ec:bd:3b:77:04:d4:f1:3d:
                    58:d3:36:93:1c:3e:d0:31:10:ce:aa:a3:59:23:a3:
                    75:95:0f:10:22:53:47:50:e6:91:e5:b3:21:6f:49:
                    02:ca:50:ba:42:84:5b:42:e7:66:d6:9a:64:63:7f:
                    7f:ac:14:b1:07:eb:f8:f0:10:b1:b5:ec:7d:f4:92:
                    55:48:5b:f9:e3:ed:14:43:1e:a4:84:2b:8d:43:59:
                    20:88:8c:34:4c:8b:ba:f8:5e:b7:64:10:99:70:a5:
                    08:b5:36:32:1e:8f:87:0c:6a:06:93:f7:e4:65:ab:
                    4d:9a:43:b1:09:54:ed:a7:e6:7f:5f:3f:e4:e1:65:
                    7a:dc:80:16:b0:cc:59:58:b6:07:62:d5:03:f3:b5:
                    a8:29:5c:65:fc:81:0a:71:87:14:22:b5:15:d1:91:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:8E:86:11:F9:58:FE:D2:5F:73:14:AB:73:76:1F:D8:FD:5C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b76b0e73-3654-3759-b899-2df0895f0aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:06:da:96:b0:53:02:30:d4:d4:b0:74:19:8d:6b:ba:73:a4:
         84:cf:26:fa:b2:61:26:08:65:e8:08:41:a2:c1:95:27:f6:37:
         b0:38:a6:fd:94:4e:c0:79:bd:cf:c3:f5:79:d4:be:70:4c:0c:
         84:a8:ff:fb:76:32:c2:09:74:e6:07:bc:ba:d8:32:12:ad:4c:
         a4:ce:74:41:35:d2:3c:5f:dd:ce:3f:88:eb:86:97:85:33:7b:
         e9:8f:ba:d2:64:eb:fa:c2:b8:e4:96:dc:e5:9f:f4:bc:7d:05:
         1b:40:aa:f6:52:d1:f3:9a:96:d1:28:a5:77:51:ad:9b:d9:ff:
         2f:aa:25:3d:dc:94:8a:4d:be:c4:57:ca:3f:37:f1:df:45:38:
         df:91:c3:36:03:a6:b5:00:f0:c1:4c:4d:f0:94:7a:84:9c:c8:
         dc:e0:42:40:e6:92:8b:26:55:a1:dc:74:66:f3:e0:e5:6a:be:
         f0:50:76:29:a1:36:58:a3:94:a4:f8:7d:34:19:06:55:aa:30:
         5b:6f:c4:98:02:63:1a:df:4b:c8:57:be:7e:58:66:69:88:4c:
         09:6f:c5:9e:97:e5:98:e4:da:ac:06:fa:7a:c5:f8:8e:11:db:
         41:de:b2:73:78:e4:7f:5b:02:9a:9a:86:d8:ec:62:15:1a:5f:
         ae:db:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:28:06 2025 by rpki-client