Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa
File:                     5388bc64-7e00-3aef-b50b-4426eee59515.roa (raw, json)
Hash identifier:          up3DC3jRphBXBQCnqg2wywwwDh8Oh99ele6xooZuMNU=
Subject key identifier:   AD:9C:57:65:38:2D:24:DE:03:9C:F7:A4:CD:7E:DF:88:6A:5D:12:C3
Certificate issuer:       /CN=e35c7007-7a33-480f-a32e-40481f8f1792
Certificate serial:       010D0C9F4328584A00DABB71C0ACB3A19AA03840
Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     53636
IP address blocks:        199.59.144.0/24 maxlen: 24
                          199.59.145.0/24 maxlen: 24
                          199.59.146.0/24 maxlen: 24
                          199.59.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:bb:71:c0:ac:b3:a1:9a:a0:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=97fe8b71-4666-4f4d-b0da-b18e9ebcf4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:3d:cb:f0:ee:7c:52:56:33:cf:87:c2:7e:
                    81:8e:4b:51:0d:98:46:94:af:35:8a:c3:15:11:fd:
                    7f:d7:e6:1d:e6:42:8e:48:de:00:da:7f:60:e3:5e:
                    1f:72:5c:d6:a9:6d:f6:1d:0e:66:39:cd:bf:4d:0e:
                    79:d9:0a:dd:39:f6:45:44:bd:32:4c:3e:39:c5:83:
                    84:5c:75:9b:47:a9:e8:5b:b2:d4:2b:65:17:3b:90:
                    86:5f:0c:63:d2:ec:a0:a2:90:d2:4b:3c:92:4d:c3:
                    53:0d:c4:eb:b2:da:b3:b4:21:48:9e:de:de:bf:86:
                    0e:aa:b9:2d:19:8c:60:a9:83:6e:d1:90:ef:71:0a:
                    08:d9:48:65:e4:5c:a5:78:2e:04:99:f9:fb:ff:4c:
                    fe:e9:b2:32:11:59:95:e2:48:98:6e:70:fe:6b:c8:
                    6b:31:86:91:c9:3f:9d:e4:ee:c1:c8:8d:fa:f7:19:
                    70:c3:bb:cd:70:3b:b0:ab:78:7d:d0:df:6a:ed:67:
                    f1:b4:2a:77:50:12:97:90:92:7d:30:96:6d:50:87:
                    b2:89:71:f2:5f:08:0d:94:f3:65:e5:c5:83:3f:e4:
                    97:95:a9:40:0f:ab:bf:00:9e:cd:13:2c:2a:c3:20:
                    dd:90:e1:97:57:bd:e8:04:9a:0d:00:ec:cc:3a:83:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9C:57:65:38:2D:24:DE:03:9C:F7:A4:CD:7E:DF:88:6A:5D:12:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/5388bc64-7e00-3aef-b50b-4426eee59515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl

            X509v3 Authority Key Identifier:
                keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:5a:40:26:2c:11:ca:8a:ae:40:c7:7b:be:7b:60:17:bc:
         01:14:36:2e:19:77:0c:4b:37:df:a6:fd:03:3c:83:6e:2c:ab:
         cd:33:00:98:cb:5f:8f:f6:57:4a:d0:fc:99:3a:48:ad:7b:10:
         9c:2c:cf:a4:7e:44:9e:eb:b9:a9:8d:04:ed:3b:18:08:f3:25:
         1a:19:ff:1c:ee:68:e0:17:b9:5f:cb:7a:9c:07:95:13:af:0d:
         1b:5e:a3:6b:33:c1:1f:ce:ac:23:13:9b:6c:0d:f5:4c:cc:0a:
         e2:1b:b2:98:1b:52:32:24:90:58:72:99:d5:36:9c:59:00:9c:
         eb:87:d9:07:02:34:03:e4:08:43:1c:db:8b:0e:71:1d:85:1c:
         aa:fd:ac:de:74:68:82:e7:a4:1a:e9:29:a3:88:3a:45:b5:08:
         e3:72:43:f9:78:3a:93:75:ea:11:e3:0e:f7:e7:fe:00:ea:f5:
         72:b2:57:46:ac:53:b4:01:7a:13:a1:63:b7:7b:fe:25:dc:ac:
         08:09:31:ce:93:37:17:94:bf:f9:62:5c:6a:48:97:cf:6c:ed:
         8b:c2:ae:eb:20:23:06:27:2c:a1:5c:8d:59:f5:fb:db:39:9b:
         27:4c:dc:04:38:da:b0:12:a1:d8:c8:de:3c:10:ba:9f:d4:23:
         01:69:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:56:23 2025 by rpki-client