Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/85830ccd-3ffb-37a7-84c0-8ceefd8a4ab3.roa
File:                     85830ccd-3ffb-37a7-84c0-8ceefd8a4ab3.roa (raw, json)
Hash identifier:          qCj4J6llwkp3NDRh2GdQBv1QS0QtnWPQq4Kch16DMTE=
Subject key identifier:   9E:7D:99:76:E5:4C:59:3D:F9:89:90:D3:BE:E3:B7:05:74:71:FA:EB
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC8594C89F2165C0F03C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/85830ccd-3ffb-37a7-84c0-8ceefd8a4ab3.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     54085
IP address blocks:        159.18.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c8:59:4c:89:f2:16:5c:0f:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=11757617-2f86-40e0-bf83-721f540c7db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:71:2a:62:18:49:18:78:fa:3e:d3:e6:b9:
                    d4:a3:10:8a:5d:67:74:48:30:da:e8:44:09:8b:91:
                    e5:e8:7d:da:f3:28:a9:b9:f2:ae:ab:f8:2f:d0:a1:
                    77:8f:8e:58:ee:f6:10:3c:fb:40:12:56:5c:1b:c6:
                    35:32:b1:a5:8c:44:7e:10:5e:4a:63:32:6e:d5:22:
                    d0:1c:4e:5c:f8:f9:19:14:d7:4a:fe:b1:53:40:03:
                    da:fa:a5:d7:6e:db:7a:b9:e3:6d:da:76:32:a1:63:
                    ed:7c:d7:1c:5b:ff:19:ed:07:cc:59:ce:aa:39:01:
                    57:44:7d:e9:35:6b:06:7a:e9:95:3a:62:07:f2:a6:
                    1b:51:5a:75:7e:1c:4d:13:c9:9d:d7:a3:44:1b:2c:
                    cc:ed:2c:9b:55:b8:86:e4:77:fa:32:e1:f3:ba:86:
                    d8:47:0b:79:82:ba:61:bd:ca:01:95:37:b9:ce:6e:
                    ff:23:28:fe:fa:75:3e:c7:41:43:63:4e:84:cb:5d:
                    4c:b3:86:8d:d9:58:6b:af:4b:88:d3:b0:43:e8:b9:
                    ab:16:7e:b9:42:1a:0d:b6:fc:ba:c4:42:f0:0b:65:
                    65:11:59:34:d6:77:61:79:98:c2:b3:d1:83:db:56:
                    ab:3a:3b:65:4e:1e:ad:fa:9e:25:1e:f3:13:6f:ce:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:99:76:E5:4C:59:3D:F9:89:90:D3:BE:E3:B7:05:74:71:FA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/85830ccd-3ffb-37a7-84c0-8ceefd8a4ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:b7:7f:ae:ac:e0:b3:a0:f3:07:23:bf:8b:67:ce:ab:ba:
         f5:77:17:6c:55:32:f1:98:d0:70:38:45:dc:0c:e9:e7:29:5a:
         0d:06:8a:6c:5b:31:1b:6c:f4:7b:90:3a:11:87:45:d2:d0:1d:
         d5:92:bf:c7:6c:b3:43:82:23:3a:10:a5:45:44:d8:6b:d7:b3:
         fa:ef:5b:a2:76:fb:eb:47:32:ea:21:ae:c2:1c:c5:8f:9b:39:
         d5:5f:7d:d8:ba:6d:3c:df:73:b3:c2:81:26:f6:b9:74:cc:4f:
         42:03:61:78:ea:ed:e7:17:d4:ae:a3:11:8d:41:05:42:44:5c:
         bf:fa:9b:67:7c:ba:59:ec:01:94:2f:11:2c:84:09:99:52:99:
         2e:bf:b4:6c:73:ac:d9:0f:8f:97:1a:5a:f0:37:b0:8b:63:72:
         c8:95:70:bb:7f:43:d0:09:90:c7:56:64:08:0a:e5:a7:49:71:
         cf:4c:c8:a6:a9:0b:4e:8f:f0:72:39:2d:3a:94:15:cb:12:96:
         a8:39:7f:29:b3:56:8d:08:e5:e8:47:34:29:81:5b:75:92:bf:
         ad:ea:1a:6b:88:1d:c3:4c:e2:d0:5b:8e:9b:48:a4:4b:0a:b0:
         e0:f8:9b:56:be:7c:03:06:85:11:e6:78:0b:d4:75:5d:5e:cb:
         3b:34:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:34:35 2025 by rpki-client