Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa
File:                     2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa (raw, json)
Hash identifier:          supJFAOkEOU2E4HD9/jnrv+BEyEpAuFOMeGBpFODK6E=
Subject key identifier:   37:52:B5:81:84:61:11:D5:30:38:A1:F6:20:A4:77:C2:EC:3D:41:AE
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F4328584A00DAC5C0B43356811C14D700
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     62467
IP address blocks:        204.197.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c5:c0:b4:33:56:81:1c:14:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b5840501-a006-4c55-bbc6-e85edd8eab0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:aa:12:d4:57:c7:46:8e:43:98:94:c2:d6:
                    9f:67:d0:fd:a7:6e:af:ef:77:a2:ef:20:e9:3f:53:
                    5e:c7:dc:a8:fa:ad:d8:54:02:bb:78:89:99:95:9f:
                    f3:38:a0:b3:c4:02:b9:7c:f5:7a:99:dc:cc:bb:9a:
                    cb:58:19:5a:1c:7f:0c:02:0a:89:64:b0:e0:db:f7:
                    9c:e6:2d:3c:fc:6b:f2:2b:22:8a:5d:68:a5:3c:f3:
                    52:32:7f:a2:ba:27:8d:88:ba:ad:94:24:17:54:32:
                    ae:9e:32:3e:8a:6a:53:51:b6:f9:87:26:fd:cb:80:
                    3e:30:6d:d5:bb:bf:f0:47:5f:43:e5:b3:f5:5d:e6:
                    b3:01:e9:f7:ee:ae:9a:d9:a1:05:82:f8:62:8f:1d:
                    02:83:a0:34:ff:fa:de:4a:a7:e6:1e:28:49:cb:68:
                    b1:9b:e9:00:f2:f1:cd:54:cd:1b:3e:50:32:cb:12:
                    8f:42:7b:07:59:cf:b4:d2:93:57:d5:b1:45:23:a4:
                    08:fa:89:ce:26:41:df:31:79:7e:6e:53:8c:1b:00:
                    27:bc:25:1f:4e:d2:ac:70:c0:06:42:fd:a5:10:9b:
                    d6:ff:a4:40:75:24:83:53:b9:d0:66:ed:cb:ec:d8:
                    21:88:ad:dd:a3:d2:ea:6e:e2:09:4a:5e:5b:54:a5:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:B5:81:84:61:11:D5:30:38:A1:F6:20:A4:77:C2:EC:3D:41:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.197.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:36:e8:90:c3:61:ec:f8:cb:65:c2:33:ea:7f:2d:83:c4:
         74:e9:e1:55:83:cc:a7:66:47:b5:0e:15:9c:72:b4:bb:37:55:
         38:c4:06:a3:61:5d:19:a3:ae:63:9b:a0:9e:79:e6:9d:78:dd:
         8e:1e:55:b3:60:ca:cc:ab:4e:23:dd:14:90:0c:b8:07:7e:dd:
         b2:73:e2:7a:25:a7:07:98:61:f5:a3:81:52:5e:93:70:8b:b0:
         54:93:be:ef:ef:5b:c3:1d:3e:cb:79:7a:a9:c6:89:82:f3:1c:
         92:29:17:dd:e1:f8:14:38:eb:59:38:28:7a:0d:39:13:5e:21:
         2b:35:84:e5:2b:6a:fc:79:54:2f:16:83:81:7d:d9:d1:f8:33:
         52:68:1e:4a:27:ba:2d:c5:a0:48:c5:57:b1:02:87:97:01:1e:
         95:dd:36:8e:da:43:07:a7:9a:29:5a:b2:63:39:78:dc:c3:ed:
         94:2e:9a:ef:83:60:06:41:87:a2:01:b4:ae:56:f7:fc:34:c0:
         4c:ff:f6:58:16:f5:64:37:67:32:e6:67:12:e2:e0:be:36:eb:
         c4:aa:ea:dc:84:81:7a:23:fe:6a:b6:69:ab:8c:ca:79:f4:9f:
         8e:6b:77:b0:72:4f:36:a5:30:7b:d5:1b:0c:6d:36:3d:0e:00:
         1c:8a:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:24:39 2025 by rpki-client