Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/05b79960-f2fb-37dc-bdb1-7798a156397a.roa
File:                     05b79960-f2fb-37dc-bdb1-7798a156397a.roa (raw, json)
Hash identifier:          +3fJzroTjuM2ZUUaw0oq1Tfs0Bbq9J7CA03xijvtups=
Subject key identifier:   35:6D:BF:90:F4:2E:EF:93:28:5F:F9:FD:CD:1E:90:D9:0D:AD:73:BB
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285849806F104EBDF336493CD5E960
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/05b79960-f2fb-37dc-bdb1-7798a156397a.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     19165
IP address blocks:        136.31.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:10:4e:bd:f3:36:49:3c:d5:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=ea476d41-edd3-417e-8994-f74b1da7bdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:e0:84:f0:06:80:d7:d7:6d:ea:fe:a9:60:
                    c4:19:77:78:99:c5:75:28:61:36:4b:8c:bf:01:c3:
                    6d:27:6f:fb:1c:ad:43:61:92:52:b1:93:ea:63:a1:
                    ca:f9:32:4e:a7:a3:8e:cb:fa:23:b4:ab:ab:7f:74:
                    f6:4d:42:e4:9d:af:dd:40:c9:2a:d3:11:87:04:7e:
                    38:49:18:64:98:e6:44:96:95:5e:bb:f7:ec:b2:a9:
                    0a:07:69:b1:fb:d7:9e:6c:0f:58:4b:22:7a:05:85:
                    54:76:e8:59:4e:ee:e5:7d:d7:6b:d0:f3:07:c4:50:
                    5c:ed:f2:31:30:3e:4c:0e:bf:f6:52:63:0f:43:c5:
                    b5:6d:e6:da:03:b3:7e:4b:a2:78:45:b0:7d:c8:18:
                    8d:b6:e8:c8:5d:a5:40:a9:41:c2:fa:97:61:e4:54:
                    1c:a5:d3:f5:d9:74:da:f3:0c:4b:b8:d0:71:30:99:
                    34:05:e1:1f:59:01:0d:73:e7:f1:cf:d8:38:36:45:
                    cf:a8:ec:42:90:4a:b5:28:19:c4:b4:cd:36:23:fd:
                    70:15:6b:00:e4:be:c2:c4:f6:7d:97:65:87:9c:d5:
                    5d:83:f5:4a:32:3e:6d:9e:3c:e5:65:1b:b6:84:f2:
                    05:9b:e0:6d:fd:09:1f:59:e3:32:7a:20:74:85:75:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:BF:90:F4:2E:EF:93:28:5F:F9:FD:CD:1E:90:D9:0D:AD:73:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/05b79960-f2fb-37dc-bdb1-7798a156397a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.31.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:17:fd:33:9f:49:2f:c8:22:9d:d3:cb:e4:eb:60:f2:7d:30:
         72:30:a5:dc:61:70:44:2f:e5:cd:82:db:19:10:a2:12:c3:72:
         40:f1:0c:78:7f:b5:76:d2:ce:37:03:be:bd:b1:d7:83:5a:65:
         d4:70:ad:2e:9c:37:39:ee:28:73:f1:29:9f:c0:05:b4:70:6d:
         5d:22:ba:81:14:92:97:e5:02:ea:3b:d8:45:56:16:a3:c6:f3:
         f7:6a:44:8b:e4:ad:b2:d9:8c:1e:62:c2:89:c2:c5:a6:c2:43:
         fe:20:bc:5b:f7:53:3a:bd:c5:ab:0b:f9:ed:55:a4:91:c2:45:
         96:a3:ab:a8:34:c5:46:93:69:79:bb:60:ac:11:a9:9c:7c:d8:
         5b:bd:5b:e9:92:3e:32:0c:1c:b8:46:ba:b2:79:40:3f:56:40:
         2e:76:fd:4b:d3:8b:5a:94:65:2d:44:ea:0d:c0:e0:35:e4:da:
         1f:70:c8:34:35:81:cd:be:5f:8a:5b:fe:f6:de:db:f8:bf:d9:
         a1:65:91:6a:83:16:6d:f7:7e:21:c9:e2:91:a6:67:76:e6:ff:
         e1:d8:8f:2d:93:68:44:2c:7f:f4:ff:cf:ea:6c:19:ef:51:86:
         d7:d2:a8:f7:7c:55:d1:f3:91:ea:8a:c1:6b:3e:7d:8d:89:5c:
         1e:e2:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:27:29 2025 by rpki-client