Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/459cc33f-b493-32c6-9593-641920d148a2.roa
File:                     459cc33f-b493-32c6-9593-641920d148a2.roa (raw, json)
Hash identifier:          zhNO/pyPqwowUNA2hUhmPO40tMZ9J6h83qr4G6ZTre0=
Subject key identifier:   28:C2:42:5B:FE:50:23:6F:42:76:D3:93:EC:1F:B0:D0:5C:50:8B:14
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849A61F3C17E62593C6EA38D180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/459cc33f-b493-32c6-9593-641920d148a2.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        170.114.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3c:17:e6:25:93:c6:ea:38:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=8a8fd2a0-3487-4162-ac9d-806ffce537d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:f7:b6:45:e5:71:ea:4c:df:1b:06:5e:03:
                    5b:1f:d8:a4:c1:5f:5f:24:90:74:72:52:07:e7:40:
                    cf:97:a7:45:5e:72:de:70:22:0f:5f:01:1e:42:49:
                    7a:7c:d0:30:b6:94:f3:c0:33:68:76:92:b5:48:dd:
                    46:4e:32:e2:d8:28:98:a1:02:c9:ba:c3:f8:45:1c:
                    38:17:46:96:64:b2:6d:9a:5c:85:9c:41:48:f7:f4:
                    4e:e2:d1:bf:c7:82:38:34:c5:5a:92:ce:ee:6b:38:
                    da:9b:b1:0a:0a:b1:09:4f:a1:42:59:a6:3d:93:54:
                    43:72:02:7f:bd:2b:38:93:24:ea:6f:03:f3:ea:a6:
                    ff:9c:8d:09:e8:0e:97:be:90:e9:1b:81:fe:ff:9e:
                    de:f0:39:27:92:07:8b:ee:a3:5b:17:50:eb:ed:6d:
                    67:0b:0e:7b:c4:c7:74:4b:55:e1:1f:9c:d8:97:e2:
                    27:39:9d:07:7b:ab:03:52:c2:91:b7:7e:b7:40:91:
                    5a:62:cc:a4:7f:27:17:7b:dc:4a:a9:a8:0e:a1:06:
                    e3:d3:dd:6d:45:f4:bc:fb:b0:f8:b1:de:c6:ad:1b:
                    32:4c:bb:86:1a:0e:50:8b:0c:15:2c:50:f3:87:a4:
                    14:a3:d8:b2:12:71:11:8d:4a:03:25:3a:a2:a4:cf:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C2:42:5B:FE:50:23:6F:42:76:D3:93:EC:1F:B0:D0:5C:50:8B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/459cc33f-b493-32c6-9593-641920d148a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:82:f0:cb:a6:b7:47:21:7d:dc:96:88:9b:f8:b3:f6:a5:
         06:0b:83:06:ab:61:d5:ba:76:bb:49:d7:ef:0b:c1:14:e5:14:
         64:40:44:c6:8b:ca:88:75:2f:3c:af:c4:77:6c:9a:c1:b9:11:
         4b:85:64:a8:72:6c:a6:c3:6f:2c:9a:82:fe:b9:a9:ab:81:f7:
         1e:39:2e:a2:0d:91:6a:a7:70:03:73:de:b5:a5:23:37:f4:02:
         28:99:e4:e6:8a:bd:26:d6:fd:71:12:65:56:42:fc:ef:51:3a:
         83:cc:e5:2b:c5:0f:e5:fa:ea:77:c7:13:3d:7c:02:3a:38:c8:
         45:27:60:67:d4:fc:05:5a:1c:b2:27:34:34:d8:ea:32:4e:96:
         22:68:d0:2e:fe:2d:7c:99:48:4e:b4:0c:c5:cc:a2:5e:3b:af:
         c6:86:48:9a:1e:86:38:7f:ba:6b:35:b7:7e:a2:23:81:d1:8f:
         dc:8c:1d:f1:10:75:de:86:08:a5:02:e9:29:10:cf:fe:58:74:
         24:d3:8c:50:7e:51:ec:55:a6:db:ed:dc:56:c1:79:fb:fc:0f:
         6d:3b:1b:a3:fb:70:97:23:54:b2:0c:c6:29:b0:d8:43:8b:b4:
         77:e3:da:0f:b2:f9:d6:8d:70:7e:13:05:44:9b:e1:dd:f4:8c:
         74:26:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:59:45 2025 by rpki-client