Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/a2b24fdd-22aa-3156-81b6-a9167b8a8b5a.roa
File:                     a2b24fdd-22aa-3156-81b6-a9167b8a8b5a.roa (raw, json)
Hash identifier:          PRm5zIfVgBs+KSbbayd/sFtiXGmYAvhiFYkrSyWym2A=
Subject key identifier:   CA:94:19:31:1A:04:39:EB:80:E5:62:0C:1B:9D:2C:B6:D2:74:F7:FE
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584A9900C77115F8AF27F52C8C00
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/a2b24fdd-22aa-3156-81b6-a9167b8a8b5a.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     5645
IP address blocks:        75.119.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c7:71:15:f8:af:27:f5:2c:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=bd9d3251-cd44-49d8-84e0-71b782cebd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:82:a7:61:b2:4e:ab:ff:ab:52:cc:04:7a:
                    3d:c4:1c:26:eb:f4:a6:70:e0:23:9c:34:60:7d:da:
                    be:36:12:d9:d9:a2:00:01:9b:9b:97:cb:be:52:6d:
                    a4:76:35:d4:78:cf:57:dd:4f:50:e6:ca:f9:26:fa:
                    8c:73:6a:2e:35:5a:1a:d9:f7:52:eb:51:62:58:89:
                    7c:b4:20:4d:f2:76:0d:48:19:77:75:13:68:d6:b0:
                    1f:0d:c6:ab:92:fc:1e:0e:3c:2b:23:20:7a:21:40:
                    19:f3:b0:a0:5d:aa:a8:78:1c:80:7b:ce:dd:70:05:
                    1a:65:14:c1:6d:90:26:77:38:52:a9:cd:4c:35:a8:
                    79:ca:0a:3a:db:fc:cd:db:9c:fe:63:4c:73:fd:e3:
                    a2:ac:8c:bb:37:67:d6:10:cf:f6:46:f6:ab:e1:52:
                    84:ed:b2:df:42:11:b1:23:86:4d:40:b6:af:cc:a3:
                    63:88:3b:17:bd:12:01:db:1f:65:f3:b2:9e:52:b5:
                    43:8e:c6:37:ac:88:ee:77:93:6f:93:66:2a:56:2e:
                    8e:82:72:f9:e2:49:f4:bc:33:fb:94:25:d0:d7:c3:
                    61:c1:9d:23:bb:a4:37:8e:8c:c8:b0:59:bb:20:b5:
                    87:d8:c8:ae:cd:f8:b1:66:fb:c8:58:e9:53:6f:40:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:19:31:1A:04:39:EB:80:E5:62:0C:1B:9D:2C:B6:D2:74:F7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/a2b24fdd-22aa-3156-81b6-a9167b8a8b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.119.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:98:f6:ca:3f:03:4f:60:8d:14:3b:fd:d1:ef:90:78:16:6b:
         1a:69:d0:c5:3f:75:8b:78:59:38:2e:63:88:23:97:ee:a8:32:
         66:9b:ce:df:3a:14:a4:b7:a3:8d:40:16:58:43:8a:ab:de:76:
         f2:b3:d3:0a:f3:31:f2:4f:19:32:c6:d5:6b:ce:98:93:62:ac:
         1b:b6:9f:ae:f8:a3:d1:f9:02:e7:d0:ee:c1:30:82:82:b9:5d:
         36:47:c8:64:2b:40:15:6f:2e:02:b2:6a:75:9b:b8:ad:a0:15:
         e7:bd:40:ca:34:b1:91:69:a7:4c:a2:d8:f2:7f:5f:a6:9c:ec:
         34:85:a1:73:5a:14:c8:a9:ea:b0:19:c1:c9:18:70:bb:68:1d:
         c8:6c:dd:7a:92:6e:18:3c:89:a4:6f:4b:90:a1:3c:85:fc:74:
         b8:39:55:be:34:f7:24:74:71:53:da:89:d8:53:da:7f:d5:29:
         ca:56:b8:d1:92:c5:e2:ca:1c:eb:3c:a4:5a:e3:a6:60:de:04:
         e5:e3:90:25:d2:14:92:98:c4:60:27:73:45:f6:62:31:b8:26:
         f4:5c:92:3b:73:fb:2a:d9:5e:40:51:5a:1d:05:ed:4f:f9:34:
         94:5e:b6:52:7a:1a:6b:29:20:33:35:79:02:87:90:61:07:2e:
         ad:de:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:52 2025 by rpki-client