Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/531f302d-c8cd-3353-b1d7-3a63148b3f67.roa
File:                     531f302d-c8cd-3353-b1d7-3a63148b3f67.roa (raw, json)
Hash identifier:          zacwLJrIGvcilyf+1nkv58VPZxiZpW8dKLHe2jcfkWM=
Subject key identifier:   1D:5F:C0:2D:CD:CF:30:27:4A:73:97:3C:87:3E:5B:64:1F:3D:5D:89
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6A91D8BD515634F48840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/531f302d-c8cd-3353-b1d7-3a63148b3f67.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20115
IP address blocks:        174.81.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6a:91:d8:bd:51:56:34:f4:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=648de139-1a4a-4280-9616-b39f6c135173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:99:72:31:2a:59:f9:9c:ab:1b:f4:92:78:
                    10:4e:51:5d:9a:45:63:25:78:a8:d7:a5:5e:37:0e:
                    3b:93:bd:0e:54:46:e7:d8:be:53:86:4e:24:95:98:
                    3e:ce:cf:09:80:67:54:1a:1d:cc:72:24:92:fa:ef:
                    53:61:72:34:c7:66:48:71:3c:c6:83:91:51:7e:9b:
                    07:75:37:44:0a:a5:1b:9a:16:6d:61:f5:74:fb:96:
                    98:d1:ae:4d:02:03:04:0c:35:43:75:59:05:07:43:
                    cf:3e:16:be:fa:22:51:40:1f:cb:c9:37:b7:28:85:
                    95:8a:7f:10:b1:c9:45:d9:0b:51:12:c3:57:b5:3c:
                    5d:b5:68:17:b2:19:8b:32:8b:a2:7f:b7:94:8e:6c:
                    e5:a0:63:58:2c:93:08:1f:75:49:09:d9:3d:dd:7f:
                    c4:dd:34:4a:fc:46:8a:ab:37:1c:76:59:4a:9a:5b:
                    20:df:e6:b4:68:ef:2b:96:97:6d:13:cb:94:fb:32:
                    b7:24:30:e1:4a:ac:ee:38:1a:0f:e6:eb:cc:2f:6b:
                    05:cc:51:c9:05:e7:97:8a:c9:ca:4f:6e:64:ce:01:
                    c0:92:f8:4e:c8:a5:d8:31:28:33:0c:c9:80:36:b2:
                    60:a2:dc:77:ef:c3:f2:b8:9e:83:a8:c9:f0:f9:ac:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5F:C0:2D:CD:CF:30:27:4A:73:97:3C:87:3E:5B:64:1F:3D:5D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/531f302d-c8cd-3353-b1d7-3a63148b3f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.81.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:21:67:4c:60:d5:45:a8:49:5f:8c:0a:1d:b9:09:f0:02:85:
         c1:d6:f7:07:f2:57:f3:90:1a:f3:d1:89:c4:b3:78:ae:68:b5:
         3f:ab:73:02:e3:e4:3f:d1:ce:0e:e2:43:b8:18:81:fa:04:5a:
         6c:1b:34:6c:70:2f:aa:8b:ef:2b:26:ce:fd:16:84:53:d5:66:
         f2:21:89:67:66:36:31:46:63:b9:77:a2:66:c6:14:c6:e5:b1:
         c7:76:44:db:eb:5e:b9:21:94:b0:2f:b6:92:d2:48:db:3c:6e:
         7d:94:53:3a:ca:5c:e1:10:95:d9:dd:b1:37:25:27:c8:18:62:
         2d:0f:a6:e8:c2:87:0f:c5:73:ba:69:ce:28:50:84:bc:64:68:
         a4:82:47:c0:ce:1c:86:26:6e:42:e1:de:69:be:35:08:27:d3:
         bd:ff:2f:93:64:ab:3f:76:c1:4f:cd:c5:8e:ed:9d:17:16:33:
         4b:6e:0f:b4:e4:c2:49:33:88:d8:3d:d4:20:e2:35:24:9a:bd:
         25:71:53:8b:67:4c:ec:fd:9e:d6:7e:88:33:94:1f:e1:f2:e2:
         4c:bf:20:e2:80:16:af:4d:18:b0:3e:16:09:d5:4a:24:b5:7b:
         b3:7d:b5:de:14:46:05:95:1d:f9:b3:96:c4:3d:05:47:69:dd:
         e4:f0:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:57:18 2025 by rpki-client