Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/037ce711-17cb-3655-bfe6-f303acd00264.roa
File:                     037ce711-17cb-3655-bfe6-f303acd00264.roa (raw, json)
Hash identifier:          wEL6HobZPpDot3OcEd4G/c+5kVGy97YgAJg5GszKU6c=
Subject key identifier:   37:C7:C3:12:0B:CA:3B:B3:11:B2:C2:E3:87:B8:3A:08:14:4E:7D:73
Certificate issuer:       /CN=04ea0880-2156-4bff-9635-feb716ac6fae
Certificate serial:       010D0C9F4328584A331AF3EADA7367FFD183BF40
Authority key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/037ce711-17cb-3655-bfe6-f303acd00264.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     906
IP address blocks:        170.39.22.0/24 maxlen: 24
                          2602:fd45::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f3:ea:da:73:67:ff:d1:83:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ea0880-2156-4bff-9635-feb716ac6fae
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=004734b5-5c75-4037-ba16-5263966eb993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:f1:6f:9c:aa:0c:a0:08:84:a0:95:ff:ca:
                    cd:f4:c8:e8:df:6c:ef:3d:ed:05:9c:64:1f:53:d7:
                    5f:81:af:98:42:cf:89:b8:7e:c4:dd:46:98:b2:a2:
                    1f:f1:2f:89:0f:c6:e9:b4:b4:7a:57:b5:de:d0:e4:
                    6a:46:07:33:fa:64:8d:92:07:e3:41:57:d6:3a:8f:
                    33:b4:3a:7b:ce:c5:0a:15:5c:c8:0f:aa:f6:e9:8c:
                    43:17:ae:c8:3e:9b:d3:8a:79:f4:94:e2:d9:99:f5:
                    e6:1c:7d:19:ea:2a:5c:cd:22:63:b6:69:49:b3:4e:
                    c7:7d:86:0e:6f:95:c4:82:03:c7:6d:c4:a3:fd:54:
                    eb:65:9c:92:3d:a4:5f:71:9b:3e:2b:30:54:81:55:
                    ae:40:13:bf:9f:f3:98:01:02:6d:25:e0:fd:a1:f7:
                    9b:7e:80:38:4f:6c:a7:c4:14:ee:0e:3b:37:5c:c2:
                    c0:22:20:22:aa:05:6e:fa:c0:2a:9e:a5:36:09:d2:
                    06:1b:34:5e:7a:18:a1:71:a2:69:0e:00:15:c3:18:
                    83:49:3f:20:94:19:b1:bf:e7:a8:f3:98:a8:ce:8d:
                    1f:ce:74:69:26:f1:90:c2:4a:a7:12:af:0f:c0:8d:
                    bd:23:82:44:52:d6:4c:6a:5b:90:e0:66:df:4f:65:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:C3:12:0B:CA:3B:B3:11:B2:C2:E3:87:B8:3A:08:14:4E:7D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/037ce711-17cb-3655-bfe6-f303acd00264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl

            X509v3 Authority Key Identifier:
                keyid:6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.22.0/24
                IPv6:
                  2602:fd45::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:3d:1d:08:60:d0:e1:74:7b:d1:69:f0:71:24:ec:cc:3f:
         7d:1a:3e:a7:2f:4e:66:a2:25:d0:42:af:d9:04:db:c5:56:63:
         44:ec:68:e6:1b:5a:9e:1c:3b:9e:84:1a:8a:5f:52:44:ca:65:
         81:78:9c:fd:1e:72:8b:e7:32:da:fe:99:7b:47:74:9d:1e:2a:
         c7:8b:ca:1e:96:80:d0:04:18:c6:a7:0b:1f:80:2f:be:d9:f7:
         05:6d:93:15:c6:45:96:81:e9:91:04:3f:51:71:81:82:bc:c8:
         4f:27:13:c9:b5:ca:de:69:28:00:5f:5e:7d:ea:85:86:b4:34:
         4f:81:89:66:8f:53:d5:29:75:06:f1:17:29:94:48:87:12:e9:
         c0:44:c1:7e:cf:da:88:c3:ff:90:fe:7b:88:ea:c2:98:94:90:
         67:a0:d2:f6:1e:60:12:93:8a:96:82:06:8c:f3:56:f4:0b:d4:
         53:fa:f5:1b:d1:1c:b5:8e:cd:64:6f:58:69:96:fd:8b:5e:58:
         8f:42:dd:6e:3e:a3:20:d4:da:3b:b8:3c:ea:8c:b9:29:c1:51:
         dc:95:a4:0a:3c:5b:01:00:0e:9d:9f:75:1c:3a:a2:93:e9:a7:
         1e:3d:c6:f2:62:18:a0:44:5f:f8:fe:ba:f6:c9:ed:5e:a7:b6:
         3c:f4:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:00:14 2025 by rpki-client