Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52a380f7-4dd2-3c9a-98a5-64927a935274.roa
File:                     52a380f7-4dd2-3c9a-98a5-64927a935274.roa (raw, json)
Hash identifier:          yNiGjcdwHY/kxUJEp1YXKar3C9OY84HoQeSx1Z2BeZ0=
Subject key identifier:   2D:D4:C8:EE:49:9F:49:88:79:28:65:64:19:10:F0:FE:91:62:FC:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4323918B9B0589BB058D480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52a380f7-4dd2-3c9a-98a5-64927a935274.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        174.170.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:39:18:b9:b0:58:9b:b0:58:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=6d9dde9f-de28-4a3f-97d8-603312c56433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:75:cd:80:75:63:b9:bd:e3:7b:89:bd:8c:
                    1e:96:bb:60:fa:bc:99:95:c8:57:87:8c:68:4b:8d:
                    bb:b7:d1:5d:53:3b:f8:54:2f:95:c0:73:59:e2:b7:
                    9d:5a:b8:19:fb:ff:78:17:c6:2a:8c:49:ae:9d:b3:
                    3e:b0:0f:0e:2c:26:5a:10:ba:a1:9c:c0:ba:57:32:
                    6d:d2:9b:bb:a6:0b:08:4e:48:fc:e8:9f:bd:0c:67:
                    8b:37:6f:87:f9:07:32:48:20:9b:b9:fc:6b:2d:7e:
                    78:78:d0:48:de:92:76:ca:e8:be:04:08:ed:a1:4b:
                    7a:07:92:33:5e:a4:ec:70:24:21:70:f8:5f:ff:ef:
                    71:84:3e:37:b2:d4:b2:21:d4:de:02:a8:e1:ab:2b:
                    f0:df:cb:20:8f:4d:a3:e3:fc:36:1d:82:13:f3:9f:
                    ec:d6:07:df:67:cc:37:d6:a0:09:43:15:66:5d:1b:
                    01:31:d7:85:1e:da:a1:d9:51:e4:20:a9:33:3e:bd:
                    7f:49:45:ad:03:62:86:19:05:ef:1f:d4:6b:da:2b:
                    fc:fb:21:88:3d:87:e1:ba:b9:18:fe:83:21:52:ce:
                    3e:3e:3c:79:d6:3e:c7:62:6d:3c:d5:05:1c:4d:47:
                    2e:d9:fe:b8:54:a2:36:11:98:0c:29:8b:59:13:91:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D4:C8:EE:49:9F:49:88:79:28:65:64:19:10:F0:FE:91:62:FC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52a380f7-4dd2-3c9a-98a5-64927a935274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:10:22:6c:52:70:98:0b:c9:c9:ca:b9:67:d6:e4:17:38:
         9f:7b:6b:51:3e:24:a6:9f:97:5f:52:8f:e4:83:68:a1:81:87:
         cf:44:85:8f:15:1f:f9:58:15:14:5a:2f:8a:16:7f:f1:2f:e7:
         ce:04:6a:87:4b:71:f9:23:c9:3f:86:4b:30:a2:70:07:a8:2e:
         b6:ff:6c:4c:b4:ae:cc:4b:46:5d:42:c7:13:1d:7b:b1:4f:11:
         14:de:2b:3d:cf:5e:c3:d2:66:6b:a2:b9:67:7f:ea:73:5f:a5:
         e2:09:63:01:ae:e5:66:6b:dd:4c:49:dc:68:83:7e:bf:74:b2:
         6d:35:2d:d8:98:1c:91:ef:7f:ee:75:16:28:75:87:7c:d1:78:
         e2:f7:b1:9f:c6:a1:b8:ff:4a:f0:36:0d:dd:2e:1b:76:0f:76:
         fa:fa:19:be:c9:28:fe:6f:31:c3:81:4e:52:f7:f5:9f:30:e6:
         b0:1b:37:1c:08:31:4e:fc:30:fb:91:4c:67:e2:20:62:8d:4f:
         d2:21:c4:a6:e0:9e:b8:ae:01:55:4f:ba:5e:17:a2:0b:f1:21:
         3e:e1:00:8d:14:de:46:3c:b7:41:8b:8e:72:36:92:f5:6c:ce:
         08:d6:48:81:c6:1a:ee:a1:0e:c5:7e:08:1a:82:cd:9a:d9:e5:
         af:ad:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:12:45 2025 by rpki-client