Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa
File:                     9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa (raw, json)
Hash identifier:          wxrpNmiSgu+Vjl45dqbq4LGj6qMOfROjDexnLvLRGCM=
Subject key identifier:   B1:E0:05:95:5A:C3:91:81:F1:7F:7D:95:6C:0B:E3:5D:B8:96:9E:2A
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A29555C46B708F50A629DAE40
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     13760
IP address blocks:        170.249.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5c:46:b7:08:f5:0a:62:9d:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=6af3a9b2-2648-47d4-8973-d17663951e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:0b:79:45:73:93:8c:8d:eb:64:f6:cc:26:
                    ab:06:20:46:f8:94:0a:dc:cb:e3:32:3e:58:52:1c:
                    6f:b8:ba:f3:6d:99:ed:0d:c9:21:dc:2c:aa:05:28:
                    0b:84:f1:47:e1:94:af:8b:42:11:ae:bb:db:f6:86:
                    a2:37:55:4a:97:bb:5c:d0:83:e7:5f:f9:2a:f0:18:
                    8f:0b:27:0e:4a:ed:f6:53:98:a7:c8:4f:3b:e3:e2:
                    d6:4c:db:82:6e:3a:fe:9f:bb:ad:2e:f8:12:c0:2d:
                    36:45:a9:97:bd:dc:b8:86:bd:87:a2:f3:41:f5:75:
                    d0:93:8a:7e:e4:9b:89:18:12:25:bf:30:a2:87:a4:
                    b6:76:56:df:6e:ab:3d:88:df:59:7c:88:b7:aa:af:
                    0a:e7:8d:5f:0d:e5:b3:a4:1e:ba:7f:69:0c:b5:6e:
                    6b:0f:d3:f0:b8:0d:4a:18:93:d3:5b:77:34:de:9e:
                    6a:52:2c:3f:da:f0:53:a0:55:45:7a:56:d1:93:0a:
                    0c:31:95:89:ee:4c:1d:3d:03:b7:69:a7:3c:c0:e0:
                    54:42:47:b6:5e:14:7b:6b:5b:f1:58:5e:78:f3:5a:
                    47:15:5b:b7:91:83:73:62:c4:c2:00:b8:b8:0e:5b:
                    2b:6e:a0:b1:40:39:53:73:36:f8:ca:24:ef:43:c2:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:05:95:5A:C3:91:81:F1:7F:7D:95:6C:0B:E3:5D:B8:96:9E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:b1:4b:79:ce:f8:db:9f:85:84:b0:87:f7:61:d5:6c:2b:
         9b:82:0e:5e:d2:b1:13:34:f3:1d:46:48:1f:73:bf:99:af:1b:
         0d:a5:ce:98:b5:de:08:c2:75:ef:80:e9:e9:3e:23:75:a1:2b:
         58:18:ec:d7:8f:27:c1:b0:a0:7d:96:9b:7e:08:6f:b5:cd:18:
         ed:2b:ae:19:80:c2:d3:df:b8:68:c2:fa:8d:47:e8:db:bd:2f:
         26:e8:57:1f:e4:44:5a:21:34:97:e2:a5:5d:b5:bf:20:41:b3:
         10:d7:29:55:ec:f8:c0:7a:b2:1e:7b:14:b9:7b:c7:38:fe:57:
         af:9e:a8:6b:70:31:fd:f9:08:9f:41:83:50:9e:36:5d:53:33:
         e4:09:1d:ad:5b:ae:92:50:96:48:38:ba:ab:e0:24:04:23:81:
         9c:af:8c:31:ce:02:08:d4:8e:82:dd:d5:92:92:04:d5:d2:2e:
         a2:aa:1d:ae:af:6a:2c:09:08:04:92:58:3c:1d:0f:e6:c0:5a:
         54:94:c9:40:b6:12:7f:be:f4:ce:c2:a1:11:8f:a5:cf:1e:32:
         ab:43:8b:ad:50:ca:30:8c:92:a9:09:ee:c4:c2:b2:df:bd:67:
         11:68:a7:a2:5d:7e:2d:c2:11:b7:f3:fa:40:a2:85:cd:11:b5:
         f6:91:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:37 2025 by rpki-client