Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa
File:                     661d0e61-5138-389c-ac94-1b1c855e9970.roa (raw, json)
Hash identifier:          8tdys5LNwPvzTjKBLt6hwJvvDGD2Jf0koUWcDm88P44=
Subject key identifier:   21:E9:8F:91:7F:7E:27:06:32:7E:F6:4B:C6:6E:D0:29:F9:BB:8A:20
Certificate issuer:       /CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
Certificate serial:       010D0C9F4328584AA85BBA0D8A21B13E9EC3B000
Authority key identifier: 96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     14132
IP address blocks:        192.33.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ba:0d:8a:21:b1:3e:9e:c3:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=6a513efb-0708-4210-a3b9-f6a20d9414e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:b3:a3:af:83:80:02:5c:be:6c:3a:b9:b3:
                    c4:11:ef:95:ca:ff:50:69:9a:17:e2:a8:b7:ee:85:
                    3c:6f:6c:56:72:9a:34:92:16:57:89:7f:42:8d:e9:
                    b7:86:28:21:c2:8b:af:27:ed:53:6a:e9:0d:da:46:
                    aa:ad:60:8c:c1:32:49:8f:8a:15:b6:b6:eb:99:6a:
                    ee:a7:4e:6e:92:92:96:43:2e:4d:80:3a:f3:d3:02:
                    f4:98:99:50:74:7f:0d:ba:af:78:e8:ee:a7:9e:6f:
                    b4:44:ca:15:a7:9d:ad:38:82:db:83:98:bb:bd:62:
                    29:2e:1c:c8:5b:ce:13:72:82:e9:ef:8f:ca:ed:98:
                    f7:64:27:f9:11:8a:fd:b0:55:fa:aa:35:51:6d:ba:
                    f0:72:51:90:06:72:ba:f8:d1:57:84:45:99:ce:f1:
                    eb:c7:e6:04:18:ae:94:1f:6a:5d:31:5a:0f:20:a8:
                    01:d4:a9:03:88:0e:77:85:52:91:0c:34:97:e6:52:
                    79:e0:da:a5:3b:4a:40:eb:80:f1:88:d2:98:30:84:
                    68:70:d0:73:1b:4b:c2:ae:28:88:bd:d4:28:59:c9:
                    a4:08:16:55:db:93:1b:df:04:05:ca:17:ca:53:82:
                    2e:66:3d:c7:77:26:93:da:3b:26:2a:9e:89:bd:d2:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:8F:91:7F:7E:27:06:32:7E:F6:4B:C6:6E:D0:29:F9:BB:8A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl

            X509v3 Authority Key Identifier:
                keyid:96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:c1:31:82:39:21:13:3a:4b:7e:93:b9:27:f3:f6:b4:01:
         e1:13:69:15:ca:83:bd:e5:85:8c:f9:95:fb:3f:65:2f:2d:1d:
         20:7d:23:95:58:81:d2:4b:45:e9:87:e9:4a:8b:da:c4:1f:55:
         ba:10:27:9e:e8:96:41:ec:30:29:0c:88:f4:71:12:95:64:85:
         a5:cf:d9:7f:42:b1:d4:12:e1:e0:4e:c3:62:6d:c7:7e:5c:85:
         ad:bc:3d:2a:f6:f9:1c:ec:35:00:98:37:59:4d:be:84:68:79:
         8b:6e:bf:e2:8c:f7:6b:50:8a:68:02:9a:38:19:6d:cd:b6:90:
         2a:e0:19:a0:0c:fc:ad:2a:df:e2:5e:5f:02:5f:e5:82:e8:bb:
         74:2c:d9:7c:bd:24:af:89:5c:2c:4a:69:5a:1e:f0:dc:36:51:
         b7:35:3d:22:ec:36:dd:98:ef:47:0b:9c:65:a4:1e:06:68:da:
         24:6a:4a:59:a8:d5:02:7f:12:7a:a0:0c:15:b7:ab:db:4c:26:
         12:2a:43:7a:7e:8e:2e:cd:ed:45:8f:9f:10:eb:5a:78:a9:f2:
         d5:f5:7b:2e:ec:65:03:14:6b:ff:03:f7:b9:b7:68:b4:fb:6a:
         fb:c2:00:b7:b5:86:77:69:39:6e:c2:e9:75:a3:7e:b1:76:60:
         8e:71:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:38 2025 by rpki-client