Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57c7d701-4f22-3f71-82b1-13ae9b5cca59.roa
File:                     57c7d701-4f22-3f71-82b1-13ae9b5cca59.roa (raw, json)
Hash identifier:          Y9PW5XttcJjXB7NFFci9NcH11FPsvJd9BCoKYDlZQfk=
Subject key identifier:   67:E6:14:F1:07:91:D4:43:30:76:97:04:1E:A7:DB:83:7F:0B:93:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDD7345D6320036989D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57c7d701-4f22-3f71-82b1-13ae9b5cca59.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     28317
IP address blocks:        209.51.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:dd:73:45:d6:32:00:36:98:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=2acb0c5d-f5b3-40b9-acb8-ecdd16ef4a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:7b:5b:5d:1b:5e:6a:71:a8:d8:d5:5f:c6:
                    16:03:69:12:b5:85:fa:07:32:15:32:98:17:ae:d3:
                    7f:36:47:52:16:d0:cc:db:a6:d6:52:2e:c3:ae:41:
                    09:fe:6f:dd:27:1d:5f:04:b4:d2:fe:44:67:be:60:
                    32:0a:6e:f5:87:78:57:c2:23:e8:9e:9a:cc:37:19:
                    71:2e:59:be:7b:a7:af:ef:83:e7:0c:2f:cc:75:39:
                    ce:49:36:c4:67:b0:a4:2b:08:ce:0c:89:2f:2e:bc:
                    56:45:ba:de:63:34:b2:a1:2e:99:44:cd:6f:ca:70:
                    d9:d3:9a:b5:2a:6d:f6:e4:7e:91:18:0e:11:6d:dc:
                    07:8f:df:24:02:fb:17:55:a1:60:e9:1d:38:e0:fc:
                    38:70:86:17:80:f6:ee:29:7d:02:da:de:1c:7a:5c:
                    36:48:46:c7:5d:be:50:fe:29:9e:0a:c3:fa:bd:ea:
                    f3:52:56:54:89:bc:fa:93:7b:0e:ea:99:4b:1a:51:
                    c8:63:43:fe:2a:98:d9:16:05:57:e8:a2:7d:36:c5:
                    e6:33:7b:a5:cf:f1:62:62:c6:d9:a5:d0:85:36:b7:
                    17:bc:0d:92:76:80:4a:53:e5:08:a4:d8:79:dd:ae:
                    82:99:49:0c:0d:96:de:cf:b0:e9:cc:3a:f3:4e:9a:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:14:F1:07:91:D4:43:30:76:97:04:1E:A7:DB:83:7F:0B:93:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57c7d701-4f22-3f71-82b1-13ae9b5cca59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:77:fb:73:5e:12:e3:4c:c3:5d:33:b5:df:b2:c9:1a:66:e5:
         a1:bc:47:4c:f8:a9:e9:a4:b2:cd:e5:f7:72:c6:7f:c4:39:ef:
         61:4a:f5:3c:1c:08:53:f0:ec:87:2f:a5:6e:da:e8:56:44:96:
         bc:af:a2:db:68:0a:7e:1b:85:61:72:8e:85:23:94:67:74:d5:
         9e:1f:7c:92:cb:a8:62:ef:ca:ca:b9:e4:ca:4d:73:63:51:7e:
         7d:55:05:cf:ef:7c:35:87:24:94:f0:40:83:11:bb:06:43:1c:
         cc:b4:2f:a1:7d:21:b0:ca:5b:2c:b2:4a:0d:91:61:53:ff:4b:
         e9:99:f8:f7:ea:0c:1e:76:d2:0e:d4:c0:b6:74:2b:cd:23:fd:
         fa:3c:cf:12:b3:d7:1c:8c:4e:f9:e2:b5:93:22:67:e4:1c:32:
         25:5a:46:33:5d:9d:21:40:7f:e4:6d:0f:33:9a:a5:69:27:e1:
         5e:73:b2:e2:2e:43:de:e8:0b:12:68:7e:7c:c6:2e:11:cc:9e:
         f4:76:06:6e:93:91:fc:c2:83:73:34:82:60:a1:69:bc:f8:ec:
         f4:0d:59:e3:81:03:11:e0:31:37:0c:a6:3a:72:c9:c6:4f:0a:
         73:07:cd:63:24:1e:48:f4:3a:54:84:bd:da:99:e6:ff:06:cd:
         d6:ad:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:55 2025 by rpki-client