Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/b33dba31-e420-3c1f-b89c-10569a291533.roa
File:                     b33dba31-e420-3c1f-b89c-10569a291533.roa (raw, json)
Hash identifier:          w86jQ58sXWTvYmKKT8ANhajWY3fV6pnIfKErgbYSjJ4=
Subject key identifier:   0E:5A:D3:F1:C6:A2:7D:B3:6F:FC:62:38:AA:AE:08:84:F4:74:01:18
Certificate issuer:       /CN=554d4238-61eb-47da-ab1d-d4546ac40856
Certificate serial:       010D0C9F4328584A119AAD88787EA86D56372C80
Authority key identifier: 56:5F:64:BC:5A:74:C5:13:4A:9D:B7:14:B4:C6:FC:28:80:EC:F5:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/b33dba31-e420-3c1f-b89c-10569a291533.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     3833
IP address blocks:        65.19.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/554d4238-61eb-47da-ab1d-d4546ac40856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/554d4238-61eb-47da-ab1d-d4546ac40856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ad:88:78:7e:a8:6d:56:37:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554d4238-61eb-47da-ab1d-d4546ac40856
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=67136014-1665-492b-b08b-7ee1f6ce428b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:35:36:bd:ff:0c:91:aa:63:71:6b:a7:72:
                    c8:dc:70:11:39:c5:b3:22:38:78:00:d8:7d:37:cf:
                    93:50:0c:ab:b7:8f:23:05:21:98:49:b9:b4:bd:fc:
                    86:dd:ef:46:d5:02:42:c3:20:84:ed:6f:ce:de:d0:
                    03:40:e8:84:ca:6b:e0:98:08:09:d3:1b:05:87:40:
                    7d:74:43:37:1d:6d:5e:50:27:21:31:31:f7:72:69:
                    f5:87:a1:8f:57:b0:56:01:a8:62:dc:62:3c:75:47:
                    e9:23:45:9c:db:85:70:ef:d9:d4:61:1c:d9:53:cc:
                    44:e5:9a:a4:6c:f4:82:c2:bb:d0:c2:86:74:d6:2b:
                    c7:79:93:43:05:20:7f:50:b5:f3:7f:c9:89:77:0f:
                    ed:76:47:b5:d4:69:34:a8:bc:07:df:0a:a8:d4:f1:
                    82:d6:e0:5d:e3:e7:01:99:9a:7b:eb:e4:18:3e:3e:
                    a2:18:f1:3e:84:18:bb:9e:f8:98:1a:f0:0f:2f:2e:
                    43:b4:53:bd:3f:41:f7:df:1b:68:4a:bc:58:9d:0c:
                    33:36:33:f4:a9:ca:a9:d2:4b:65:82:8a:cd:ca:52:
                    5c:7e:49:d5:ae:4b:90:0a:5a:4a:64:ac:0a:60:b1:
                    c3:a0:65:c4:b4:1f:d8:11:a5:29:0b:ec:33:eb:cf:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5A:D3:F1:C6:A2:7D:B3:6F:FC:62:38:AA:AE:08:84:F4:74:01:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/b33dba31-e420-3c1f-b89c-10569a291533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/554d4238-61eb-47da-ab1d-d4546ac40856.crl

            X509v3 Authority Key Identifier:
                keyid:56:5F:64:BC:5A:74:C5:13:4A:9D:B7:14:B4:C6:FC:28:80:EC:F5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:0f:43:f9:75:fd:f4:0d:07:81:dd:70:ae:de:87:9b:fd:
         27:7f:7c:d7:2e:c3:0c:2b:a6:8c:24:a2:8a:2c:0f:ed:6c:65:
         4b:45:42:b9:a4:e8:53:fd:93:27:2b:70:a8:90:36:3a:83:28:
         29:cd:08:84:8a:75:01:3a:ca:cc:5e:79:67:16:9b:24:98:c4:
         50:ae:e2:f0:46:73:66:f4:48:c3:4d:99:ba:50:a8:07:94:47:
         cb:3e:c2:21:c1:3c:1b:5c:5e:c3:43:c1:e8:96:83:35:61:c9:
         e5:53:8a:f9:cf:22:18:e9:78:fa:4b:72:ea:cb:72:63:cc:2b:
         cd:bb:17:52:10:0b:33:39:cb:d3:68:54:46:14:93:08:2e:2e:
         67:9b:90:2e:10:06:7d:2c:10:88:b3:96:42:52:61:ac:87:7f:
         da:28:e0:8c:a5:bd:1d:68:70:76:f6:fe:a8:46:22:e7:ea:e8:
         ae:9b:23:d4:53:bf:b5:a3:b8:83:35:10:98:a4:ef:b2:f4:9d:
         7c:70:50:83:31:bb:a3:f2:12:b1:95:5d:d8:2a:c8:ed:2b:6e:
         60:2d:10:69:42:d2:ed:0e:ac:8d:fb:c7:ba:74:e3:21:be:1a:
         e6:76:43:ee:98:6f:16:b9:9b:45:c4:70:ef:98:16:a1:e5:b9:
         8a:48:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:41:12 2025 by rpki-client