Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/17212433-e718-3268-954b-c2ed7cbdd41d.roa
File:                     17212433-e718-3268-954b-c2ed7cbdd41d.roa (raw, json)
Hash identifier:          zbjQwHYurvUPsq4R/L/uTKgOUhLk1XepeZXY3RcwppE=
Subject key identifier:   19:EA:D9:34:F7:C5:5E:DA:D2:61:D3:03:D4:E8:F9:B3:FF:1A:1F:76
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584A58CB0A4A4A8ED905A0A54A80
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/17212433-e718-3268-954b-c2ed7cbdd41d.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     55154
IP address blocks:        199.96.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0a:4a:4a:8e:d9:05:a0:a5:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=44c609bb-5bad-471b-8818-10170c200ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:d7:9b:ea:0b:7e:4e:6c:10:3a:39:9b:ae:
                    eb:b6:2e:a9:c8:56:f4:70:3c:c3:b3:ca:a1:ff:a2:
                    3f:fe:61:bb:ef:e8:11:0b:10:4b:56:fc:40:0c:b3:
                    a6:84:65:2f:2f:67:87:c2:0f:6a:43:2b:c1:92:2c:
                    56:ca:78:a4:b8:e9:a7:9e:61:ad:3a:c4:7e:1f:87:
                    56:44:c8:47:28:54:9b:f1:22:0f:54:96:4e:ea:1a:
                    d5:4b:53:2a:46:41:6b:c5:01:4d:ca:af:b4:10:9f:
                    4c:76:58:11:25:08:a9:4f:0e:1c:4d:19:a9:44:3c:
                    8f:3a:32:26:ee:e0:aa:96:7d:2c:84:7f:87:73:ab:
                    63:3c:1f:d2:d6:82:15:a1:b7:e5:e0:47:af:8a:5d:
                    16:c9:d5:9c:97:74:ae:44:28:62:f4:35:9f:09:46:
                    34:e0:08:3b:b9:e3:82:c6:77:c8:fc:e3:95:4b:fb:
                    fd:f1:ac:5e:02:99:5a:45:3e:a2:3e:04:3e:6c:3e:
                    f6:45:49:e9:03:62:2b:3d:63:0e:4b:dc:77:21:9e:
                    e7:97:ae:a0:09:60:18:7f:94:05:c2:a0:f6:a9:01:
                    6c:39:db:9a:7f:eb:b5:b2:85:19:89:b7:86:93:dd:
                    ae:c5:87:bf:33:96:dc:64:a0:6e:1a:ec:62:d6:02:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EA:D9:34:F7:C5:5E:DA:D2:61:D3:03:D4:E8:F9:B3:FF:1A:1F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/17212433-e718-3268-954b-c2ed7cbdd41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:d1:cf:74:bb:bf:03:70:00:83:18:67:6c:4b:56:18:90:
         2d:f4:cf:5c:c8:79:f1:eb:b0:bf:58:3c:70:c2:92:d2:cc:61:
         35:3a:90:1c:b0:97:b6:3f:74:f4:2f:21:9a:4d:98:e9:f2:fe:
         58:2a:3e:dd:b6:8a:d2:ea:74:bd:50:6b:2c:c1:79:7c:07:a9:
         78:9f:dc:71:40:69:68:e2:83:99:ae:4a:18:d7:a9:c3:75:3e:
         b8:d6:02:7e:27:4a:ed:99:3e:57:a5:54:69:a6:0e:57:b7:0b:
         e8:a0:dc:3e:3f:3a:4b:9d:09:52:a6:23:d0:af:0e:9f:f1:3a:
         51:ed:30:ba:32:62:dd:2e:4d:24:23:c9:1e:47:96:8a:d9:a5:
         2b:98:b0:9a:8c:6e:80:3f:2b:17:1d:3d:2a:3b:ae:3c:41:26:
         af:93:9c:20:1a:af:37:79:02:23:ec:8e:b9:5f:db:5a:28:bb:
         36:76:b2:e2:9d:49:3f:61:ed:69:e9:5b:a3:c1:11:d6:ce:7f:
         bb:b9:10:8f:76:d9:b4:d7:32:12:5d:b5:93:7e:72:0a:ff:b1:
         13:95:1b:90:00:c7:dd:dd:2e:7a:40:1b:81:64:08:1f:72:fb:
         da:9d:ad:73:a8:fb:d9:a4:5d:81:9b:01:03:5a:85:68:c7:30:
         b6:75:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:19:44 2025 by rpki-client