Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa
File:                     57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa (raw, json)
Hash identifier:          dkFNFGRgi+aGwmgMmcB8Ih0HeAqKZfimTty2Vmmung8=
Subject key identifier:   38:F8:27:C4:56:54:68:9A:8D:06:FA:D3:38:0C:3C:F1:DB:9D:E5:5B
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F432858496FAF09A69CF88F5306198F10
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     6621
IP address blocks:        69.19.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:09:a6:9c:f8:8f:53:06:19:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=c78fbef4-35f2-474e-a8a0-4d00c4447b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b2:da:61:e6:48:d6:8d:0f:b7:ae:78:3f:af:
                    e9:b3:8c:a5:f2:60:3c:4b:e2:ff:f1:dc:a0:d2:91:
                    19:6e:e9:aa:3b:34:3e:f7:14:11:d3:4b:85:81:b1:
                    b1:e8:42:41:d2:77:6e:59:87:6e:37:64:af:10:dc:
                    27:18:c9:b1:32:2b:a3:d7:43:56:3a:67:99:81:19:
                    e4:61:1f:c1:f6:c7:c0:37:6a:8b:2f:1b:eb:b9:b9:
                    3e:36:ff:c2:1b:4e:0c:e0:b3:12:9d:48:89:c1:f1:
                    e3:33:93:53:b6:d8:9e:40:28:b5:b1:2a:de:96:cc:
                    46:04:da:20:0c:cf:5b:b6:a0:a5:de:52:67:1b:02:
                    e9:90:f3:b8:3c:d9:7b:7f:51:a3:19:0b:64:d2:a3:
                    1e:5e:af:1a:c8:13:66:66:2f:08:aa:d4:0d:e2:8c:
                    e9:08:6a:0e:69:a8:a7:42:0a:0d:b7:4e:68:10:9b:
                    20:a2:36:96:07:30:9e:bc:05:08:a5:3e:43:9b:e8:
                    50:be:9d:85:06:e0:8c:e7:84:bd:9b:e7:6f:ec:42:
                    23:0a:8d:f8:e7:a1:c8:45:72:05:b0:36:ff:3d:46:
                    99:c6:d5:e1:83:09:f6:d9:80:8e:96:c2:e5:b3:8b:
                    58:61:15:a3:88:6f:79:77:6e:e1:be:bd:18:8b:d3:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F8:27:C4:56:54:68:9A:8D:06:FA:D3:38:0C:3C:F1:DB:9D:E5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/57c2a35d-43be-3fea-9e50-bce3ab3349e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.19.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:05:8c:9b:7c:72:e9:42:80:f5:3a:76:74:fa:c8:a0:35:
         9a:f3:f9:02:67:8c:3b:dc:09:53:66:fd:63:37:e4:2d:6e:66:
         af:22:35:ff:e2:fe:ad:8e:6b:14:f2:3e:50:4f:8b:08:97:5b:
         51:8b:f0:08:0e:5e:bc:fb:51:97:98:a2:96:ac:1f:9c:54:11:
         20:ef:e4:86:f2:ea:53:38:24:a5:dc:c8:46:5b:c4:cb:4e:54:
         15:df:4f:16:5e:9e:64:b4:ed:d7:7a:0f:27:2b:d7:6c:46:5e:
         e1:82:77:73:e6:81:0e:10:d2:36:4b:55:ba:bd:28:0b:57:db:
         57:e7:d3:57:82:f4:10:f2:59:37:ea:75:39:89:39:5a:43:0d:
         f7:4c:27:10:41:fa:3d:9c:b3:db:ff:55:39:7d:90:04:e5:79:
         f4:fc:b3:29:00:5f:f1:91:9e:0d:3e:78:62:e8:49:1d:cb:37:
         02:dc:be:ee:a4:03:d5:59:de:28:04:c6:b7:09:1a:95:5d:f9:
         cc:d6:62:db:cb:63:fa:68:7a:c3:49:3c:0b:53:d0:94:27:a7:
         67:b0:30:51:af:11:cb:74:43:00:b0:0c:3e:b3:a0:38:c5:0b:
         37:30:5d:8e:ef:f1:24:6f:37:6e:f5:d8:f9:c5:eb:3c:79:3f:
         2f:32:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:13:35 2025 by rpki-client