Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
File:                     d3f55b78-b0db-358b-92ae-a01f4943931a.roa (raw, json)
Hash identifier:          VdPfY7iYjPvkJCywKFECIidWRoU/8SY5NHfAM6ZLErU=
Subject key identifier:   09:4F:7C:DA:C6:9D:58:E9:02:AC:C5:3E:B0:DA:83:CC:32:1E:AC:BA
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584A07D532AAECFB84B7EDC4D380
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     18705
IP address blocks:        173.247.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:32:aa:ec:fb:84:b7:ed:c4:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=ce67a3e2-cf31-4e26-b083-9308d65f29e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:f3:af:9c:b2:4d:68:b6:d6:ad:d3:46:d6:
                    94:61:c5:cf:08:60:46:eb:9a:4f:71:b6:c5:28:62:
                    1c:fc:15:bf:57:01:0e:ce:ee:48:ca:22:73:49:14:
                    e8:9c:54:9b:37:d6:7e:c2:99:7c:0a:f5:99:e6:6d:
                    1f:bf:b2:58:26:ae:f5:3a:3b:e9:77:4f:4d:c9:e3:
                    0f:f4:11:35:58:23:2b:38:ff:e0:69:3e:ab:b7:5a:
                    da:c9:80:d2:2e:01:df:63:4e:cb:eb:96:30:e9:34:
                    8c:bb:a1:26:bc:29:b6:a3:78:3e:8e:d7:65:92:49:
                    2a:ce:54:97:5b:e0:15:1f:15:8d:1b:c4:45:ff:22:
                    3d:e9:0d:ab:aa:e0:df:52:7f:52:4f:81:61:09:de:
                    75:6f:89:5f:02:5f:4e:2c:3f:15:d4:6d:dc:91:99:
                    0a:40:71:0f:9d:5e:79:a4:79:36:cc:31:7f:5d:3f:
                    ad:e9:8e:58:7a:e9:28:1b:f9:1b:94:5c:76:69:2c:
                    d5:26:db:81:83:c3:f1:8e:4b:29:64:da:cd:d7:d3:
                    55:9e:33:1d:5d:ea:7a:92:44:46:71:68:41:bb:25:
                    d2:a1:f6:7f:6d:20:8b:3d:f6:ee:db:47:0d:1b:f6:
                    32:c2:95:50:e4:01:01:d6:fa:d9:bc:b8:ab:09:74:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:7C:DA:C6:9D:58:E9:02:AC:C5:3E:B0:DA:83:CC:32:1E:AC:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:c1:77:03:19:d3:51:2a:a6:c8:26:c2:cd:0e:f8:35:39:
         75:a9:59:f5:30:cd:2f:b3:7a:dc:2e:93:89:3d:77:d5:0e:ac:
         55:fe:2c:9c:61:3f:ca:79:53:9b:0d:c7:1d:6e:7d:92:92:84:
         d8:3e:8e:1f:25:06:df:b0:3a:be:4f:13:b6:2b:8e:53:87:49:
         36:3b:d0:0b:41:12:28:a7:45:a1:eb:14:ba:3f:c3:f5:64:b0:
         d1:e1:90:f4:19:ae:78:49:2a:98:17:96:ad:92:4d:18:24:1b:
         bf:d1:d8:bb:8a:09:e1:9b:0e:0b:6e:97:17:55:ff:8d:7f:33:
         09:20:83:45:2e:da:e0:4c:30:3d:65:92:f0:0d:e9:b7:dc:36:
         5a:6c:32:92:69:f6:c1:03:27:ca:86:0c:56:d6:c5:8b:c1:20:
         17:35:ea:c9:9c:1a:0f:0a:42:c9:2e:8e:3a:29:53:3a:19:91:
         95:ac:87:27:49:30:4c:98:f9:dc:17:79:82:af:ac:cf:9e:d2:
         22:27:07:e4:16:8c:56:62:45:d2:75:db:32:18:dc:32:9c:e8:
         93:0e:20:ef:ae:ff:6d:ea:e9:0e:51:82:06:81:35:7a:95:32:
         1d:22:3c:fe:dd:1f:e2:6f:33:61:8f:85:52:87:aa:70:9c:c3:
         c1:e4:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:38 2025 by rpki-client