Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/f21117f5-dcae-3ce3-b390-c2c44110ce5f.roa
File:                     f21117f5-dcae-3ce3-b390-c2c44110ce5f.roa (raw, json)
Hash identifier:          A1+TesJtAwKx9Ntfynq2IQSqKrJPz3XjkiW3UwoRUmM=
Subject key identifier:   BE:2B:10:65:17:51:A6:A8:24:CF:36:6E:E8:2D:82:08:73:51:2A:30
Certificate issuer:       /CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6
Certificate serial:       010D0C9F4328584A14655744CB411C2730B0ACF0
Authority key identifier: 31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/f21117f5-dcae-3ce3-b390-c2c44110ce5f.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     395662
IP address blocks:        86.63.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:57:44:cb:41:1c:27:30:b0:ac:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=dae1ed5f-fd18-4055-99b3-a9829645d5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:df:1d:69:62:47:21:5f:eb:e8:f4:3a:72:
                    a2:e8:cb:c1:f3:18:dd:10:d0:89:df:aa:52:72:a4:
                    0e:57:0f:74:e4:61:0d:b1:3e:77:15:3b:18:ec:5f:
                    1b:0a:31:a0:70:57:b4:fe:ba:a8:8b:91:a2:6e:60:
                    7c:a5:2d:03:ab:ff:d8:b3:de:cc:ca:5f:30:1b:89:
                    c1:ad:eb:e0:b6:d6:86:58:66:46:69:d0:25:26:19:
                    15:0d:c5:18:fa:77:be:02:a0:30:35:0b:44:88:ed:
                    05:ed:95:db:46:3b:05:4c:97:9b:73:5e:a6:e0:10:
                    42:d6:4d:cd:0d:17:0a:9c:20:a7:6f:8f:b3:ac:95:
                    d7:75:b6:51:18:2b:a3:21:28:dd:48:13:1c:aa:0b:
                    10:14:3a:67:67:93:0d:48:81:1b:61:60:26:c5:70:
                    1f:35:73:af:4d:d9:cd:7a:02:58:3f:40:24:16:a6:
                    92:b9:26:06:1d:c6:60:24:8c:36:60:84:2b:6b:13:
                    7b:a5:76:be:c9:b4:3a:b9:6b:b6:06:30:06:1f:17:
                    9e:ac:55:b4:7c:19:34:71:20:db:d7:6f:07:53:12:
                    05:1f:62:67:71:56:7c:bb:68:d9:12:08:67:74:ff:
                    38:7f:f9:cf:db:db:51:9f:bc:59:3f:55:fb:9d:e8:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:10:65:17:51:A6:A8:24:CF:36:6E:E8:2D:82:08:73:51:2A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/f21117f5-dcae-3ce3-b390-c2c44110ce5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl

            X509v3 Authority Key Identifier:
                keyid:31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.63.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:7d:c5:5a:50:7f:65:2d:6d:72:34:4e:9d:44:6d:b2:dd:
         4a:62:b3:94:a2:cf:59:08:63:29:fb:ed:f3:d7:66:f9:09:97:
         17:13:2a:55:77:bd:e5:38:a4:ad:85:2f:8a:77:8e:df:88:23:
         09:cd:5e:a8:44:37:6a:f3:df:66:0a:e4:ca:25:e3:95:5b:42:
         9d:95:55:d1:3c:08:00:32:0b:71:b4:17:fd:b7:10:43:fd:f9:
         dd:a5:a7:9c:9d:90:06:e0:ac:42:a4:b2:bf:73:57:65:5b:6d:
         1b:f0:53:41:76:4d:e1:f8:ce:08:fe:2a:ad:76:3d:f2:f6:d6:
         86:55:b9:dd:1d:e0:b5:2b:62:9c:7f:43:58:3e:4b:d3:ae:5e:
         14:55:1a:32:1e:33:45:46:c0:85:a8:b0:76:b4:bc:bd:97:b9:
         f0:c5:74:43:82:2a:03:c9:94:8d:bd:75:4f:49:14:b0:01:d4:
         90:55:4f:af:21:97:d0:51:bd:fe:e9:4b:1b:03:db:ba:7e:b8:
         71:07:e1:23:89:00:a2:95:9b:0e:ad:35:b4:ef:a0:bc:32:df:
         0a:16:b0:47:4a:9a:c0:f0:f9:84:00:ae:5d:76:25:97:16:d8:
         df:e0:f8:52:57:7c:7d:50:42:d3:6e:ea:42:e1:86:89:a5:03:
         10:b1:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:24:43 2025 by rpki-client