Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/15dbee0c-fce2-314a-8895-5423a50249ab.roa
File:                     15dbee0c-fce2-314a-8895-5423a50249ab.roa (raw, json)
Hash identifier:          LiG/Ad8smfp6qbr91GawR+92zC8njIA+weztjXtX2aE=
Subject key identifier:   6C:65:69:32:3A:B7:0B:E0:F0:87:2E:53:6E:C1:2C:70:5C:63:69:D1
Certificate issuer:       /CN=55dee63f-73f3-40c2-82e6-22c18183f4e0
Certificate serial:       010D0C9F4328584A1B6005DBC91D0BA16E860180
Authority key identifier: CB:5A:50:8D:B1:D3:5D:B6:A3:05:C6:08:C7:12:DD:1D:71:E3:68:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/15dbee0c-fce2-314a-8895-5423a50249ab.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        167.253.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/55dee63f-73f3-40c2-82e6-22c18183f4e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/55dee63f-73f3-40c2-82e6-22c18183f4e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:05:db:c9:1d:0b:a1:6e:86:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55dee63f-73f3-40c2-82e6-22c18183f4e0
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=7e9eeae8-841d-4e9e-8459-1a3f77fee77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:cd:57:30:1e:d8:7b:c3:10:6d:c2:fa:78:
                    39:92:89:3a:a8:d1:d5:96:31:89:78:76:45:12:e2:
                    07:a7:c7:0c:38:6f:0e:a1:d0:4e:c4:c2:84:d2:ed:
                    42:37:97:6b:3d:4f:13:c8:61:04:52:dc:ef:0a:c3:
                    f5:f9:6c:bd:8b:ca:99:3c:02:a9:a8:be:99:a1:81:
                    6e:55:73:3b:4e:a8:59:8f:d2:eb:ea:b3:46:af:4d:
                    83:ba:93:71:0f:fd:8a:9f:7b:79:3d:c8:ce:94:d7:
                    a6:e4:54:f7:94:f7:91:2f:90:a1:b7:3c:19:3e:d9:
                    50:29:11:20:88:93:fd:9b:3d:3a:d7:91:26:d7:d6:
                    b3:5b:4a:e2:64:93:44:8d:c2:6e:87:d2:b4:57:f0:
                    73:1c:31:83:c3:b8:4d:be:b1:5b:fc:f6:58:8b:b1:
                    2a:e9:0a:14:70:aa:f8:88:d6:a9:ed:46:03:6b:75:
                    82:71:31:ae:9e:4a:53:56:52:94:b9:da:21:08:05:
                    e8:b1:3f:9a:9e:ed:18:9b:61:8e:b6:18:41:6e:48:
                    5b:00:77:8b:42:c2:fe:01:68:56:47:31:d5:13:b6:
                    27:48:fa:31:cf:b6:60:2d:c1:43:8b:fe:8a:10:78:
                    8c:c6:f0:59:52:89:16:9c:fb:6d:17:ed:bd:18:3a:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:69:32:3A:B7:0B:E0:F0:87:2E:53:6E:C1:2C:70:5C:63:69:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/15dbee0c-fce2-314a-8895-5423a50249ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0/55dee63f-73f3-40c2-82e6-22c18183f4e0.crl

            X509v3 Authority Key Identifier:
                keyid:CB:5A:50:8D:B1:D3:5D:B6:A3:05:C6:08:C7:12:DD:1D:71:E3:68:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55dee63f-73f3-40c2-82e6-22c18183f4e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:02:f8:7f:da:26:e2:de:57:93:e9:89:60:47:d3:f3:b4:57:
         b9:45:26:d8:c8:c8:1f:6c:d2:e7:d8:95:a4:80:55:40:3f:c6:
         8d:d7:a2:78:a8:b1:cc:5d:da:09:43:e9:bc:10:a4:1c:ed:f9:
         7c:78:c9:e2:cd:7f:21:5a:5f:dc:cf:6c:00:a3:84:ea:78:9d:
         57:fb:2f:2c:48:9f:35:27:e8:b4:ef:2c:cb:fa:f9:8d:43:cf:
         3d:5f:2c:cf:e2:a5:f2:0e:ec:a3:83:4a:ee:4d:48:1b:ba:dd:
         75:62:18:37:86:50:13:8d:14:f6:14:a0:7a:0d:e9:82:79:27:
         a2:0d:cb:4d:d9:1d:89:09:9f:fd:24:8a:3e:f8:1c:c4:a7:2d:
         0f:c2:25:a8:8c:9a:5c:86:71:75:22:c8:6e:65:94:86:9a:b2:
         59:91:c2:1d:85:d0:aa:67:aa:13:2b:5b:3c:b7:6e:d3:f3:6c:
         4d:50:a5:cc:bb:0e:7f:33:3c:0b:63:a6:31:7e:8e:38:ce:7e:
         d8:8d:2f:da:6d:2e:ce:bf:7f:4b:33:a0:55:07:50:33:16:9c:
         ba:13:a4:2f:59:b3:ec:6a:50:70:ec:53:e2:58:7e:ef:86:7c:
         97:1e:f8:bc:61:a2:34:85:11:60:ee:65:09:eb:cf:8d:38:a8:
         2d:09:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:47:00 2025 by rpki-client