Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/755cca33-61d3-3f09-a038-89752e8240ed.roa
File:                     755cca33-61d3-3f09-a038-89752e8240ed.roa (raw, json)
Hash identifier:          f+hNbLbv8S6EVGSh1GO/MPXuHvqjdIIsWDtqApaH4fY=
Subject key identifier:   19:DF:C5:60:2C:4E:C4:32:4F:DC:10:F4:BA:38:CC:3C:08:02:E2:F8
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE3150562B1ABC65EA280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/755cca33-61d3-3f09-a038-89752e8240ed.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        174.137.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e3:15:05:62:b1:ab:c6:5e:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=8d9b0837-c461-43c4-92f5-ee65846d8127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:f3:a6:e1:71:e9:5b:d2:9b:84:92:68:d0:
                    d5:ea:7b:24:ec:5e:c4:7f:3f:01:80:17:85:8c:b1:
                    58:50:34:dd:71:79:4f:15:67:d1:65:74:b1:71:13:
                    da:7b:e5:48:7b:42:d2:72:5c:67:53:30:a7:f2:76:
                    5e:62:6f:ab:4e:4e:d6:66:8f:3c:ac:66:07:dc:50:
                    81:54:77:07:17:0b:55:0f:c8:5f:6a:17:f9:da:1c:
                    82:09:00:c4:d2:c3:6c:5a:de:a8:59:50:c8:81:3f:
                    11:91:0e:52:1d:c0:d9:4f:8d:2c:01:d1:15:9a:6d:
                    83:58:d1:2f:c7:71:c1:83:69:18:f2:b7:13:63:53:
                    0f:57:c0:2b:6e:ca:a7:e5:47:72:3e:03:ad:03:a6:
                    0c:42:fc:0a:b5:7e:e8:63:aa:bd:ff:a5:2b:ca:0c:
                    d7:39:38:0e:b8:a5:df:e9:6f:54:3a:ea:44:ba:1f:
                    52:74:d6:6d:92:01:33:bd:10:df:08:c1:f1:f1:57:
                    e8:74:ae:7a:bb:25:e6:d6:5e:39:81:8c:f2:33:0f:
                    f7:91:c9:fe:90:85:17:14:a6:4c:2a:91:fe:8a:fa:
                    72:ea:ab:a8:af:5f:0a:09:6d:5b:3e:ac:a5:a9:65:
                    50:60:a5:b1:88:53:6a:e7:73:a7:8f:27:aa:e2:92:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:C5:60:2C:4E:C4:32:4F:DC:10:F4:BA:38:CC:3C:08:02:E2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/755cca33-61d3-3f09-a038-89752e8240ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:ba:43:f3:df:c0:56:08:e4:75:b5:09:0f:41:06:8e:8c:
         88:5d:1c:c6:00:5d:37:54:42:f3:74:f6:7d:d3:b1:f5:fe:fb:
         46:f6:32:e5:8e:14:7a:96:0b:4b:67:f2:cb:de:9b:37:68:40:
         40:e5:39:4b:18:c3:b1:76:1c:c6:b1:0c:fb:2b:86:c0:3f:a5:
         2d:e0:fc:8b:47:a5:23:23:aa:da:99:6e:52:0d:40:27:28:c7:
         8f:b7:49:b7:e7:07:b4:77:5c:0a:bc:3e:58:26:2d:e4:82:e0:
         f3:94:fd:34:7f:7f:02:84:07:85:cc:6c:b9:8d:16:37:3d:56:
         0b:be:fe:22:43:20:82:49:62:60:17:c4:a9:a7:8d:6f:56:54:
         24:4a:9c:bd:a4:51:c5:58:20:59:85:99:f4:ed:33:60:98:99:
         1f:09:9f:cb:be:c0:d1:d4:63:98:8c:6a:90:f4:5d:bf:a5:3a:
         87:36:e5:59:51:6d:ed:1e:c7:f8:06:1b:c6:cd:90:7d:1a:25:
         e0:18:e2:be:fb:35:36:3b:54:b3:fc:d5:16:70:30:64:df:72:
         db:e6:a1:bc:8a:b1:61:f1:b1:30:61:64:9b:00:d4:9e:04:87:
         b4:55:81:0d:e5:ad:d9:40:de:fb:03:76:dd:5a:f0:55:c9:1d:
         4c:4c:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:37:54 2025 by rpki-client