Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1d13030-13a2-3864-a682-f81955ebfcaf.roa
File:                     c1d13030-13a2-3864-a682-f81955ebfcaf.roa (raw, json)
Hash identifier:          niWvqa2DTWqZMkm+anjb504PjZBD5p815GMNTX+A/2A=
Subject key identifier:   00:CB:C3:4D:EA:F5:99:59:C5:CF:46:BB:0B:F5:CF:C1:93:01:5F:48
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584ABD4B80AE3C3805924C356E00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1d13030-13a2-3864-a682-f81955ebfcaf.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        134.224.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:80:ae:3c:38:05:92:4c:35:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=778903a9-5f16-4da1-95fd-d4074d3268ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:99:ab:19:06:72:22:47:3c:25:90:fe:5d:
                    9e:ba:49:9e:9e:29:47:36:18:d2:e8:a5:1c:4b:4b:
                    8a:5c:2b:25:d7:17:3b:04:0f:e5:d6:44:cc:97:be:
                    eb:1d:22:21:af:31:02:71:ab:be:26:fd:7c:f9:a5:
                    e5:58:57:8b:63:96:69:fa:9a:c8:6e:26:f2:91:bd:
                    14:05:bd:ba:93:76:e9:98:4f:d2:b1:6e:52:5e:39:
                    d7:9d:ea:94:15:60:de:dc:9f:9a:42:f8:30:40:cb:
                    f9:41:cf:5e:d1:05:05:ab:d4:87:dc:ef:30:02:ef:
                    f0:9e:8c:90:23:a2:2b:bf:3d:32:55:2d:75:fb:4a:
                    f6:62:33:fe:45:e7:5f:ed:d6:18:e4:bc:49:71:16:
                    d5:40:01:dd:a3:09:b3:28:d5:0f:0d:e5:8b:18:c8:
                    da:61:b9:ec:cd:35:b9:c7:05:03:7e:af:b0:a1:40:
                    5e:28:23:29:52:60:45:d0:fc:58:60:94:d7:23:b2:
                    bb:5c:57:74:2e:89:14:e3:38:d2:70:dd:19:1e:82:
                    75:f2:65:3f:91:98:57:2a:d2:1e:3e:b4:b6:c1:bc:
                    6e:ca:91:87:61:53:07:9e:37:a8:ff:e7:f2:92:cc:
                    b2:b4:35:54:4c:83:d2:96:8c:ba:6f:2e:99:58:49:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CB:C3:4D:EA:F5:99:59:C5:CF:46:BB:0B:F5:CF:C1:93:01:5F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1d13030-13a2-3864-a682-f81955ebfcaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:5f:d9:7f:8d:45:8e:58:be:f1:4f:21:9c:bf:ee:39:90:
         1a:0d:01:dc:23:9a:88:8a:9f:a8:f2:d2:be:b9:ef:d4:e1:69:
         fc:2c:b1:72:6c:58:d3:e8:ec:c3:97:df:6c:1d:6c:6a:c2:04:
         78:94:20:a9:6d:f4:91:36:a4:e5:0a:55:8e:73:14:9b:76:5e:
         49:40:bf:ca:ea:51:fb:81:cd:a6:ca:d9:a2:2a:1c:57:fb:bd:
         25:e9:28:fc:70:a2:ab:94:00:69:7e:fc:b5:84:c6:cb:a5:dc:
         50:0f:8a:de:8d:91:ad:ae:5b:9a:b4:78:89:6c:ca:34:3e:fd:
         22:fb:4b:71:65:29:24:55:ea:e1:05:ce:43:a0:11:51:c4:98:
         cd:1a:bb:82:e2:61:63:ec:03:c8:15:f8:2f:78:84:e1:34:5d:
         b8:43:e5:a9:13:cc:6f:56:8b:bd:b9:cd:96:cd:9f:35:bb:22:
         61:be:9b:94:5e:b3:01:2e:3a:e8:34:97:09:66:4b:4a:d1:14:
         54:85:f1:94:45:05:7a:33:be:8b:7d:5b:13:a8:6f:7e:49:b7:
         3f:07:03:93:90:1b:29:15:3a:eb:44:24:6c:4f:df:55:80:b3:
         0c:d6:7f:4b:d1:14:52:d4:e4:22:2b:4e:dd:c5:d9:37:ba:4f:
         81:93:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:56 2025 by rpki-client