Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/6dbaf374-3c53-3e34-aab4-5884bed871ee.roa
File:                     6dbaf374-3c53-3e34-aab4-5884bed871ee.roa (raw, json)
Hash identifier:          zdHRfC0ezP/5cwpphwhIA8qUOCOdfrFnrrmUXgKG/qI=
Subject key identifier:   A7:CF:43:E9:04:39:40:A0:E1:A1:60:97:D7:59:82:86:D5:73:27:32
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584A10353A0C50C7ECB9AFDE4380
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/6dbaf374-3c53-3e34-aab4-5884bed871ee.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        155.63.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3a:0c:50:c7:ec:b9:af:de:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=0225f5c6-9b24-40a9-b913-61716945f833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:9f:c9:19:19:5a:32:ed:f8:82:6b:50:d4:
                    4e:74:5b:5e:7a:15:54:95:2f:2a:ba:2f:a8:6b:18:
                    fd:a5:67:c2:62:ad:6c:92:f8:28:7b:f1:72:cd:82:
                    ee:29:11:95:9a:13:04:cc:c7:64:7f:e9:c9:04:52:
                    be:8d:0c:b7:6a:6b:34:50:df:14:93:4c:fe:0d:0d:
                    01:76:fb:93:62:39:a3:88:07:86:fa:ca:62:13:85:
                    76:27:49:3c:ec:30:d7:ac:3a:8d:55:27:1d:e8:a4:
                    29:5d:65:de:dc:2f:3d:35:02:38:b2:c1:ea:a5:39:
                    ec:30:a2:f9:f5:84:ee:8f:bc:9e:64:c4:35:e4:d6:
                    9c:6e:4b:cc:4f:e3:a1:27:ab:ab:1a:8e:11:46:63:
                    94:53:cf:f0:f7:a9:69:66:8e:fb:2c:18:5b:27:91:
                    e1:3f:eb:fc:1e:ef:09:0e:8c:4b:2d:1c:ad:d8:f2:
                    f6:c8:c1:79:2e:af:9c:93:ef:d4:00:8e:2d:dc:1b:
                    e6:b5:65:1c:7c:4f:bf:a8:a8:d6:1f:72:4c:72:60:
                    cd:32:cb:53:a5:c5:33:e0:24:16:39:43:5f:66:7e:
                    89:5c:f3:ba:9c:1b:3e:de:ae:81:61:33:bf:78:37:
                    44:93:07:f9:6f:6e:89:ce:7e:df:00:15:70:64:5f:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:43:E9:04:39:40:A0:E1:A1:60:97:D7:59:82:86:D5:73:27:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/6dbaf374-3c53-3e34-aab4-5884bed871ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:45:61:f4:37:88:6d:29:21:19:55:b9:2b:3c:6b:85:58:2c:
         5e:1f:8b:10:3b:34:26:8e:c6:bb:5a:bb:05:1a:af:81:79:65:
         ac:c3:c6:49:49:5d:49:b5:c0:c4:c5:70:2f:c5:9f:e9:35:36:
         02:0f:98:b5:2d:de:f8:01:fd:22:cd:05:ce:81:28:8a:b8:c4:
         59:99:52:70:d6:cc:6f:c5:93:ec:7a:7d:ca:f0:b9:fc:19:0e:
         36:da:e3:a1:f9:69:0f:ec:71:73:78:d4:b3:35:41:81:45:0d:
         1d:b6:29:9c:9a:a1:24:79:a5:3a:32:48:f5:7e:6a:7c:84:13:
         2b:d4:c3:c3:02:8e:19:cb:80:59:eb:16:78:aa:8b:f6:63:a5:
         3f:e5:32:75:29:df:03:04:6b:ed:02:73:42:61:54:f1:23:48:
         13:c1:6a:97:b3:18:d9:4e:c5:8f:3e:7a:15:43:d6:ba:c8:d6:
         ba:2d:30:0c:3d:8c:6f:77:13:5c:ab:c6:7f:a6:76:96:9a:7e:
         03:31:db:0f:02:e5:7a:7e:03:4f:cf:62:f3:4a:1f:f5:9b:60:
         27:8f:9a:e5:de:1b:4f:7e:77:a7:84:c2:4d:65:8b:e9:69:42:
         43:71:23:17:55:f0:08:f7:bd:98:d8:0b:17:d5:9d:bd:4f:84:
         73:e6:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:13 2025 by rpki-client