Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b54786b-0839-39f9-9a0f-b1975eeea595.roa
File:                     6b54786b-0839-39f9-9a0f-b1975eeea595.roa (raw, json)
Hash identifier:          QWlVr7UW98tJfL4I8vp6uVLHj4iz9yZKQmgrNl7a1GY=
Subject key identifier:   D7:17:2E:44:A4:5C:E3:50:0B:3C:E3:CC:41:DB:84:C1:6E:9D:A1:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB04A4C8B003F5C9380DAE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b54786b-0839-39f9-9a0f-b1975eeea595.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        174.52.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:4a:4c:8b:00:3f:5c:93:80:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=553f5ea9-32cf-42de-8e0f-c269e8728b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:5a:f4:35:dc:40:78:d2:2a:88:8d:cd:1c:
                    ce:70:2a:bc:f7:42:be:14:1a:c6:8d:86:19:38:22:
                    24:ac:3b:04:1e:0c:b1:99:d8:ba:a6:f2:d1:8b:8c:
                    21:9d:78:69:7d:5f:41:d8:4a:be:06:6c:2e:4c:e1:
                    d1:32:01:68:c6:e2:b3:d3:7f:9b:22:fc:29:cd:81:
                    6e:86:0f:41:8b:63:67:09:cb:47:39:d3:a5:0d:9c:
                    15:a9:34:4f:ea:b0:4f:a7:08:41:a4:e0:f2:d1:9d:
                    bd:66:83:c1:08:76:bc:00:a1:c6:bb:a2:54:20:7f:
                    08:26:ff:72:17:82:16:95:c7:9f:9d:2b:25:18:54:
                    43:39:24:09:16:cd:3b:e6:68:96:73:ec:37:9f:ed:
                    4b:9e:76:6d:3d:92:d4:ba:be:5e:91:25:68:5a:53:
                    14:4e:dc:64:83:d4:a1:63:5b:a8:e1:aa:bc:d4:66:
                    ef:9b:1b:72:fe:29:d5:68:5c:91:97:99:1f:75:1f:
                    1e:5c:f2:5b:e3:86:0d:bb:3b:95:97:19:39:98:2b:
                    5c:f0:e8:c8:22:5a:9c:41:a4:ec:53:36:e3:d0:cd:
                    bb:e8:13:f1:5b:40:80:a6:99:ff:ca:a9:37:c6:a4:
                    a8:11:1a:53:bf:ef:14:e4:4f:52:dd:ec:10:80:a9:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:17:2E:44:A4:5C:E3:50:0B:3C:E3:CC:41:DB:84:C1:6E:9D:A1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b54786b-0839-39f9-9a0f-b1975eeea595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:94:c9:8f:cb:31:d0:19:18:ea:f6:43:3a:e8:e5:ed:8b:81:
         2c:7b:99:4c:1a:3a:20:07:d6:04:2c:02:8a:c7:0e:18:b6:27:
         41:e2:ce:ef:25:dd:14:7d:4f:c0:05:55:80:1c:dd:69:73:23:
         42:e3:99:8e:00:61:d5:49:42:68:54:a5:96:80:f7:01:40:2e:
         4f:8a:9d:ff:27:a8:90:9b:43:b0:31:f4:f5:51:04:46:29:80:
         4d:06:51:a6:0f:ac:f4:7e:87:1a:3f:ce:05:b1:4b:ac:37:4b:
         1e:f3:09:17:00:6c:b4:d7:75:e8:2e:a5:32:b8:bf:5a:ef:66:
         77:2c:3f:84:71:67:8e:1b:bb:5e:c8:5a:0a:01:67:7f:69:82:
         b3:87:e7:35:59:10:6b:40:20:6f:c5:8f:f8:48:52:9f:1e:ba:
         b9:27:43:f8:e1:d1:4b:7c:b8:b0:03:8d:c9:b0:26:73:f0:c7:
         ea:0c:bf:8a:ae:dc:9c:82:d1:19:65:40:63:76:cb:a8:61:e6:
         8a:92:70:a6:6d:2a:eb:cf:15:35:f8:cc:47:95:4a:9c:e6:aa:
         82:17:ac:ec:b7:ea:bc:ed:d6:76:bd:5b:e2:06:4f:1a:f6:8d:
         bb:90:1c:bf:0b:e9:c9:8c:1b:69:96:ad:c9:16:d1:4b:25:2f:
         61:7c:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:43 2025 by rpki-client