Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dbe5dc07-f989-39d2-8362-ddd1e79828ec.roa
File:                     dbe5dc07-f989-39d2-8362-ddd1e79828ec.roa (raw, json)
Hash identifier:          CUNV4u8y/M0d3pDXBrHFkiYyaLwakvvtFpWiqaQTxYs=
Subject key identifier:   14:50:9E:3B:35:63:18:8C:B1:A8:B6:FE:9D:50:EB:8C:19:E3:19:02
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A74B5DA0606525214132B0C00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dbe5dc07-f989-39d2-8362-ddd1e79828ec.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        170.114.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:da:06:06:52:52:14:13:2b:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=e7a4a14f-7272-4767-a458-5385256076d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:60:4e:6a:0b:7b:b7:34:ec:a3:c9:35:10:
                    f9:68:b5:ce:f2:ac:de:a4:f8:7e:c5:9a:27:0d:d9:
                    03:cf:a4:ba:11:43:1c:45:ec:91:2e:f8:51:01:91:
                    49:e7:e1:aa:7b:b7:bb:57:29:c1:fe:9c:e4:0e:53:
                    d4:f6:a2:31:20:ad:1d:df:8d:97:fd:c0:c5:4b:e8:
                    64:57:38:3f:76:50:94:61:63:83:32:fe:cc:f0:cd:
                    3c:a7:9d:5e:ec:06:e9:80:df:c8:b0:fe:4d:3d:a2:
                    81:be:f3:1b:bb:7e:e4:16:26:c1:17:d1:fa:58:d5:
                    41:af:e6:cf:19:7a:83:e9:81:ea:9e:ea:4f:5a:60:
                    89:cf:05:00:07:8d:7d:af:8a:66:bc:d5:25:ac:c1:
                    6d:79:46:83:73:b9:a3:07:f1:0a:c0:7b:a6:f4:77:
                    d8:1e:72:88:3c:0e:db:95:d2:b6:60:db:b6:12:17:
                    99:ed:26:d6:ef:fd:33:9b:04:e2:57:78:61:bc:6f:
                    52:72:ea:7b:22:c4:f3:7b:c2:7a:9e:da:10:9c:a8:
                    72:19:74:e6:da:eb:71:14:ca:fc:fd:21:6c:8b:d3:
                    31:da:03:c1:02:10:6e:b4:d2:21:d2:18:b8:da:b9:
                    af:e9:60:4d:93:b7:8b:95:26:70:9d:bc:29:8d:50:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:50:9E:3B:35:63:18:8C:B1:A8:B6:FE:9D:50:EB:8C:19:E3:19:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dbe5dc07-f989-39d2-8362-ddd1e79828ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:34:99:71:ff:e3:49:e2:a9:80:b6:2f:30:d2:87:79:a6:
         91:3b:34:f0:42:07:03:2d:15:6a:8b:27:be:77:a8:c9:82:43:
         4e:78:57:67:fd:a3:0b:e0:f0:9e:d6:41:d0:7d:dc:05:78:9d:
         a1:cb:c6:58:37:a8:c0:35:56:49:10:59:7c:e8:a9:98:8e:4e:
         35:77:20:2b:93:32:a0:5c:83:d6:d3:1e:51:90:ca:1e:b4:93:
         e5:7c:29:0a:72:73:2f:12:b7:e2:27:7d:70:34:7c:c1:f0:23:
         fa:3b:f8:84:f5:92:60:ce:b1:24:49:87:02:da:d6:b6:33:b6:
         fb:32:2a:b4:43:cc:12:6b:bd:b7:f6:01:e1:cc:3e:b8:ea:ae:
         cc:31:7f:95:89:9f:fa:69:c3:42:62:69:0d:cc:90:4c:1d:e3:
         07:bc:81:3d:d0:b0:a8:aa:da:c9:80:53:1b:0c:7f:f0:81:fe:
         42:d2:43:8d:09:b2:b8:b2:ff:c3:ae:f0:f5:dd:e3:cf:f2:d7:
         48:79:e1:84:63:8a:33:d1:bb:6b:bf:5e:94:06:65:f9:e5:b5:
         7b:a8:8f:69:08:89:ed:d5:dd:13:38:37:48:1b:8f:d8:c0:77:
         e1:d9:b0:30:9e:03:16:e6:bc:9f:95:cd:2b:60:ab:b6:34:e6:
         54:bf:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:08:16 2025 by rpki-client