Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
File:                     5173c91e-d697-3bbc-b247-976d5b9dd576.roa (raw, json)
Hash identifier:          QfmhLmjbw6PO7xxJ7kanQmEq8h9fGdTAG+SgV37OGEM=
Subject key identifier:   FA:2B:49:9D:E7:A0:5C:3A:EE:67:3D:E0:F5:D6:89:14:F0:A6:71:EE
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849E670AD2741B0BA815764CC80
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
Signing time:             Mon 19 May 2025 01:56:46 +0000
ROA not before:           Mon 19 May 2025 01:56:46 +0000
ROA not after:            Sun 17 Aug 2025 01:56:46 +0000
asID:                     0
IP address blocks:        169.145.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:70:ad:27:41:b0:ba:81:57:64:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 19 01:56:46 2025 GMT
            Not After : Aug 17 01:56:46 2025 GMT
        Subject: CN=3da6bf50-6fc0-4d06-a1ed-afcb3f71201b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:a8:17:eb:f5:1f:23:a2:f5:bb:92:10:b6:
                    05:13:07:58:1b:e5:a4:94:23:f7:04:6a:8d:cd:d2:
                    84:d3:72:6f:7f:cc:f8:d9:8a:9e:4e:5e:eb:01:87:
                    ca:98:26:76:fe:cb:2c:98:1b:10:f6:9f:70:75:bd:
                    02:9e:f5:f5:1b:d4:34:ac:a4:a2:e8:11:21:7e:df:
                    12:e0:27:f6:a8:75:f3:52:9e:66:f2:88:26:59:e8:
                    af:ff:2b:e0:e2:50:bd:22:c2:4a:49:91:01:91:f2:
                    0e:1b:e9:ef:84:90:6f:d1:31:af:94:10:55:91:e8:
                    2e:fe:ea:2a:8b:fb:41:26:4b:57:d9:1a:77:bd:18:
                    a9:05:38:37:1c:e3:c3:4a:3e:30:d1:7d:ab:0e:af:
                    7f:8e:2f:1b:47:69:c3:55:e2:4d:4c:4f:4a:de:3d:
                    a1:48:98:71:ef:c2:e6:71:fe:4c:9c:df:df:7e:fc:
                    bd:fe:eb:97:67:cb:ad:c0:a1:89:2c:68:75:f9:5c:
                    01:62:4e:15:f8:ca:41:77:2a:97:51:87:78:df:32:
                    11:cf:74:09:42:ef:8a:fc:3e:0c:17:0a:ae:16:89:
                    e9:ef:a8:46:74:88:3d:0d:a2:67:fd:38:f2:8d:0e:
                    72:f5:b6:7a:0e:ec:e9:6f:3b:b7:af:86:a6:d6:69:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:49:9D:E7:A0:5C:3A:EE:67:3D:E0:F5:D6:89:14:F0:A6:71:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:9a:23:48:82:30:01:65:65:16:2b:a8:dc:bc:72:0e:29:9a:
         c0:af:68:9c:d4:65:10:0f:02:4c:60:1f:6b:f6:88:a5:cb:78:
         ef:e9:f5:e9:df:74:64:a5:63:d1:f1:c7:d6:4a:10:b8:6e:e8:
         bb:2f:ea:1a:e6:be:f0:88:2b:0e:47:7a:d0:97:75:0a:54:91:
         ab:fc:23:ab:d6:9d:aa:81:1c:55:67:a5:aa:1f:34:be:fc:2d:
         06:c5:c8:24:04:80:55:21:93:19:78:de:ca:f2:7f:df:dc:8d:
         88:9f:c6:cc:ea:93:ba:96:c2:0c:8e:26:4e:14:15:09:b0:e5:
         1c:f0:68:04:2e:9f:b8:9c:2b:60:09:2c:70:1b:b4:98:bf:63:
         a2:84:77:05:1a:38:56:dc:59:b8:e0:7a:aa:33:91:64:b9:b2:
         f2:72:30:b1:13:76:ea:d8:12:8f:5a:9d:cb:c4:6d:40:81:b4:
         00:aa:aa:3c:21:c0:23:b1:16:1f:89:0f:2e:7d:95:2c:de:68:
         c8:b3:a8:f7:70:be:c8:61:f9:47:2d:7f:22:69:a0:cf:9e:5a:
         97:ad:6f:48:e9:fe:98:d1:9c:d3:ad:99:1d:f8:ec:89:e9:e3:
         86:68:82:fa:f5:65:67:c3:04:ef:d6:ea:eb:a1:48:ad:9e:8f:
         7b:ad:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:54:19 2025 by rpki-client