Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa
File:                     d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa (raw, json)
Hash identifier:          4Y0ztGbS7xNQ9pZEKqPwfRndASZdEVPF30fnY/bpvaY=
Subject key identifier:   33:64:90:86:AF:17:08:EE:DD:B3:70:DE:32:BF:32:9B:77:7D:40:1C
Certificate issuer:       /CN=12622c55-ff6f-4fce-9274-cf19831d7726
Certificate serial:       010D0C9F4328584A37862C9678F4889E87B9E380
Authority key identifier: CD:8D:DF:73:5C:FA:80:10:BF:22:21:FE:B2:73:6D:E7:33:C1:07:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa
Signing time:             Mon 16 Jun 2025 23:19:13 +0000
ROA not before:           Mon 16 Jun 2025 23:19:13 +0000
ROA not after:            Sun 14 Sep 2025 23:19:13 +0000
asID:                     19682
IP address blocks:        192.48.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/12622c55-ff6f-4fce-9274-cf19831d7726.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/12622c55-ff6f-4fce-9274-cf19831d7726.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:86:2c:96:78:f4:88:9e:87:b9:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12622c55-ff6f-4fce-9274-cf19831d7726
        Validity
            Not Before: Jun 16 23:19:13 2025 GMT
            Not After : Sep 14 23:19:13 2025 GMT
        Subject: CN=26963aee-ac19-48cb-a3a6-4d25b4c15376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:68:b2:f7:28:9f:33:95:e8:a4:91:ed:d0:
                    9d:f7:73:7b:c5:37:76:f5:d8:06:17:9d:8b:af:43:
                    02:ad:be:0d:50:10:78:43:07:86:53:92:38:81:b9:
                    fa:34:07:be:9a:fb:88:48:b4:69:98:ed:38:5d:e6:
                    3e:73:16:66:68:75:b3:ff:0c:18:1e:66:0d:ca:90:
                    19:bd:65:87:19:ff:a7:48:c6:1c:7d:80:cf:62:36:
                    1a:1e:94:d1:a6:50:df:3f:88:62:43:b6:ab:9e:f2:
                    1a:18:01:2a:a2:ac:a5:68:cf:9a:cf:9e:08:fd:aa:
                    70:f9:35:b9:1c:4b:99:bb:05:b7:c6:bb:9b:b1:9b:
                    28:9e:3d:87:2d:a1:4a:83:f4:93:b8:49:8f:11:77:
                    41:05:b3:39:57:8b:8f:99:ef:40:38:a2:be:e6:af:
                    a1:7d:50:22:19:7c:69:7a:99:5b:2b:4c:f3:55:1a:
                    0b:cf:0f:8d:82:7a:44:2d:3a:7c:ab:97:fa:1b:25:
                    21:76:f9:a7:af:44:82:d6:e0:fe:dc:54:ff:10:a8:
                    79:c2:f9:57:c0:8c:e7:e0:ec:e3:bb:1a:9e:51:b5:
                    fc:f6:b0:ba:5d:55:8a:b6:59:23:91:6f:44:bd:f0:
                    52:88:1f:14:0d:6f:05:65:c5:54:aa:ec:f0:33:4b:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:90:86:AF:17:08:EE:DD:B3:70:DE:32:BF:32:9B:77:7D:40:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/12622c55-ff6f-4fce-9274-cf19831d7726.crl

            X509v3 Authority Key Identifier:
                keyid:CD:8D:DF:73:5C:FA:80:10:BF:22:21:FE:B2:73:6D:E7:33:C1:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1f:5e:b6:54:e8:28:44:3c:85:7c:8a:3e:bf:97:c4:18:76:
         34:4f:f0:3b:a7:cd:fd:85:0e:62:f4:57:15:a6:45:4c:72:8c:
         f0:62:e7:b3:29:4f:8f:aa:80:eb:40:1e:4f:18:39:6e:2d:ac:
         06:30:f2:09:3c:17:b2:6b:4a:d2:61:fb:31:36:e5:1b:1a:12:
         6a:21:1d:ab:70:c9:c1:36:40:4b:9b:e2:9c:9f:06:dd:49:2a:
         e7:31:cc:3a:65:61:35:ce:67:4b:ef:8f:33:24:2a:21:ea:29:
         52:c2:9e:66:1e:b9:10:6c:b5:1c:f2:c4:7e:6d:68:fd:b5:14:
         bb:e6:11:e1:35:82:c8:2b:40:19:9e:e2:54:9b:4a:2b:0c:ca:
         b2:fc:8c:f8:e0:49:b1:05:1b:2c:1b:1a:28:be:c8:fd:d4:a9:
         57:e5:e4:fc:a4:cb:d3:b7:94:c5:a9:9a:31:88:80:67:70:94:
         31:ed:74:ad:b3:87:dc:4a:67:74:ee:02:cf:e4:cb:9a:ca:b3:
         4d:d1:e5:22:7d:bc:44:43:ca:7e:fb:97:ed:8d:2a:1b:72:a6:
         86:1e:f2:7f:ab:0d:8f:6c:d0:bc:93:cc:c4:56:a9:24:da:19:
         33:d3:f3:80:86:dd:5b:40:b0:22:12:fd:bb:0a:f3:b2:97:6a:
         b1:1d:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:51:25 2025 by rpki-client