Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa
File:                     f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa (raw, json)
Hash identifier:          BJRuaf+4KzDxer37I8ZcD90Jg6g0VSzlLRYHmINoUgA=
Subject key identifier:   26:15:89:71:09:A7:D6:09:4A:5B:82:5E:A0:C4:29:7D:20:84:3A:DB
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A374AE4D4FA1E9D099A958490
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11232
IP address blocks:        24.52.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e4:d4:fa:1e:9d:09:9a:95:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=8eac6359-5660-432d-b897-7a9991e8952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:54:92:49:58:20:12:3a:e4:ce:f1:75:02:d9:
                    df:3f:23:1e:8f:bd:bd:ac:5e:57:b6:3b:5c:2e:a2:
                    6d:2c:c2:ae:10:16:cf:7c:e3:14:fb:ed:a7:63:ce:
                    ad:7e:b9:a7:86:11:15:0a:a3:50:ed:5c:0a:5b:1b:
                    6b:b2:2c:78:39:b3:71:dc:c7:0f:6c:2d:2a:b3:94:
                    99:22:7a:ca:30:38:a0:ab:ca:6e:99:e5:b6:fd:da:
                    77:2d:f5:bf:18:14:49:e9:e3:63:b6:b2:71:a5:29:
                    0d:0f:04:77:8d:83:80:16:6f:8a:03:43:6b:17:09:
                    a1:91:c9:61:0a:f0:56:17:14:6f:3a:ff:88:d6:fd:
                    b4:1b:d2:ca:aa:a2:55:81:ee:d2:41:8e:95:64:d0:
                    54:d7:89:c8:45:78:90:df:3f:db:b4:e2:93:dc:ef:
                    aa:26:28:eb:bf:a6:dc:fa:d1:45:5f:d2:0e:21:16:
                    28:71:13:f3:39:0b:7d:24:6f:3a:21:ed:22:89:9e:
                    3f:dd:4d:68:79:f3:d8:a4:16:d6:d2:b2:a7:0d:1f:
                    81:9b:43:93:f0:e2:8c:5e:df:27:b4:2c:be:05:63:
                    41:f2:5e:d4:2e:c8:49:e1:ac:a9:9e:92:94:f1:44:
                    b3:28:24:c8:54:c8:e1:5e:51:5c:cb:4b:14:67:14:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:15:89:71:09:A7:D6:09:4A:5B:82:5E:A0:C4:29:7D:20:84:3A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:af:cc:b7:ce:39:ab:25:e0:fa:58:51:fc:0e:ae:fc:f4:8a:
         27:a4:09:96:db:d1:28:57:4a:b4:18:06:c6:ea:b1:59:f4:1a:
         66:5d:f6:78:92:3e:92:79:7e:8a:b8:51:4a:fb:78:76:9e:62:
         71:3c:ac:5b:f2:6e:92:d0:f1:e3:81:70:fc:68:d0:c2:f6:2f:
         1e:db:aa:6c:d6:da:70:68:20:6a:dc:7f:8d:77:49:21:87:e4:
         3e:cf:3f:ae:9c:bd:ef:a5:36:1c:75:be:07:bb:4d:ec:43:c4:
         72:59:1d:30:c3:05:07:bf:43:09:1f:cb:88:7e:10:a6:a4:be:
         5a:d2:4e:0e:25:32:37:c5:6f:d8:8b:ed:ef:52:fb:79:89:1b:
         46:89:76:64:18:fc:75:75:14:cc:2e:41:48:c3:f2:f0:17:81:
         44:e7:45:89:b4:68:c9:bb:89:53:68:1c:08:88:94:01:2a:97:
         8d:b6:96:61:9b:bc:55:ad:f7:04:43:a5:a6:35:6f:e7:48:97:
         6e:7b:73:75:fb:59:49:dc:09:87:83:9f:70:db:06:54:a2:df:
         eb:6f:bf:b0:0b:9d:e5:e4:19:af:52:bd:e2:58:db:1a:af:cf:
         75:a1:f6:98:48:d9:81:99:42:76:11:2d:07:74:05:e1:e9:4b:
         86:06:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:54:10 2025 by rpki-client