Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/62be329e-918d-352b-8f56-556c71bea741.roa
File:                     62be329e-918d-352b-8f56-556c71bea741.roa (raw, json)
Hash identifier:          wgFQhvxfvUujg326luCe1yxIGyI3bSW7vXNw1gajvLQ=
Subject key identifier:   33:E7:30:44:39:A4:CF:23:5C:A5:9A:4D:98:21:A6:07:6D:67:D6:FE
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285849E2253B973A7921D0CC434180
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/62be329e-918d-352b-8f56-556c71bea741.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     57043
IP address blocks:        209.182.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3b:97:3a:79:21:d0:cc:43:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=eb426f18-19d8-4d6f-b474-5301aea26d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:22:9e:43:a3:21:98:90:83:35:71:1a:89:
                    72:5b:6c:82:f6:f4:88:b2:ed:76:55:69:59:2a:26:
                    b6:52:ab:a0:65:c2:65:88:36:20:64:e7:a5:19:9d:
                    d8:a5:6d:d4:f6:ee:93:96:26:5d:11:91:85:33:cf:
                    24:7b:79:2c:ce:b3:89:83:c2:5e:26:14:16:a4:50:
                    cf:bc:73:c7:60:49:ae:9c:da:c7:6b:91:53:e1:b2:
                    0f:4f:39:88:45:8d:f4:29:0b:ed:89:e0:16:7b:48:
                    e8:80:19:b6:49:84:c1:3f:29:07:5c:d3:cd:01:ea:
                    01:14:eb:94:ba:b0:c2:13:6a:91:ee:e9:de:35:a7:
                    82:21:89:e8:cd:20:d0:18:02:fb:a2:04:4c:10:16:
                    aa:02:2c:61:56:ab:c5:9a:f5:c9:f7:63:bf:32:97:
                    d6:9d:c5:dc:6b:ac:1f:71:f3:1c:61:69:c3:2b:f5:
                    e6:eb:e1:cf:e2:24:bf:6a:f8:5c:7d:79:47:18:3f:
                    65:68:28:54:c2:1e:27:13:1e:d6:a6:60:da:a4:73:
                    86:72:eb:d9:8d:a5:b2:3d:81:96:97:a0:b2:fc:0d:
                    a5:39:92:2c:14:70:ea:b5:95:a5:e9:ba:4c:b0:f2:
                    3f:6f:82:84:5e:fa:1e:c4:14:86:99:49:80:e2:6d:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:30:44:39:A4:CF:23:5C:A5:9A:4D:98:21:A6:07:6D:67:D6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/62be329e-918d-352b-8f56-556c71bea741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:20:78:75:8c:0d:bc:b1:07:a5:4f:f8:b4:0f:d8:d8:69:f0:
         17:c4:af:9a:6f:8c:9a:f4:ab:d1:c4:c8:d3:19:a3:24:23:7d:
         07:a3:26:69:11:11:5a:24:f7:f7:d2:92:fe:b3:e4:72:a6:6b:
         ba:ad:50:a7:0c:dc:e9:1f:de:30:32:ea:f1:68:be:b2:99:b9:
         24:27:dd:68:4f:f6:2f:3e:46:dd:54:68:08:23:a0:b7:64:c1:
         aa:0a:f6:8a:eb:91:ff:f8:1c:a0:66:64:31:81:6b:3a:db:3a:
         03:13:60:60:a2:88:96:e4:8f:02:f5:d7:bf:40:b8:e2:28:29:
         72:e8:bc:8f:ab:16:12:50:79:80:85:91:39:53:f9:3a:72:5b:
         04:be:ae:35:e4:25:2b:25:a6:6c:ab:e8:11:be:f8:ff:3c:05:
         6d:8b:3d:47:6e:e4:0e:27:b1:fd:db:a5:db:90:ba:70:e2:f7:
         d0:09:9f:db:fb:65:bc:07:9a:39:52:fc:90:05:4f:7f:f2:f7:
         6d:cd:72:7b:ca:ee:9f:29:bf:6a:12:31:66:f0:08:20:9b:32:
         e0:d6:b4:02:f4:33:c4:4b:ba:b7:7c:61:4e:26:d1:47:6d:c1:
         e2:f8:81:be:eb:5a:47:94:ee:d3:7d:40:c3:13:b9:29:49:9c:
         57:49:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:56:57 2025 by rpki-client